Midnight Blizzard: Guidance for responders on nation-state attack

The Microsoft security team detected a nation-state attack on our corporate systems on January 12, 2024, and immediately activated our response process to investigate, disrupt malicious activity, mitigate the attack, and deny the threat actor further access. The Microsoft Threat Intelligence investigation identified the threat actor as Midnight Blizzard, the Russian state-sponsored actor also known as NOBELIUM. The latest information from the Microsoft Security and Response Center (MSRC) is posted here.

As stated in the MSRC blog, given …

access actor attack blizzard corporate disrupt guidance intelligence investigation january malicious microsoft microsoft security microsoft threat intelligence midnight midnight blizzard nation nation-state attack process response russian security security team sponsored state systems team threat threat actor threat intelligence