{"id":74497,"date":"2023-07-17T13:42:57","date_gmt":"2023-07-17T12:42:57","guid":{"rendered":"https:\/\/smartmileco.com\/microsoft-still-isnt-sure-how-chinese-hackers-got-access-to-its-systems\/"},"modified":"2023-07-17T13:42:57","modified_gmt":"2023-07-17T12:42:57","slug":"microsoft-still-isnt-sure-how-chinese-hackers-got-access-to-its-systems","status":"publish","type":"post","link":"https:\/\/smartmileco.com\/microsoft-still-isnt-sure-how-chinese-hackers-got-access-to-its-systems\/","title":{"rendered":"Microsoft still isn’t sure how Chinese hackers got access to its systems","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

<\/p>\n

\n

Microsoft is still trying to figure out how Chinese hackers managed to steal a Microsoft account consumer signing key (MSA) and use it to target more than two dozen email accounts from various businesses and government organizations in the West.<\/p>\n

In an in-depth analysis<\/a> of the incident, the company confirmed that the theft was still being investigated: “The method by which the actor acquired the key is a matter of ongoing investigation,” it says in the writeup. \u201cThough the key was intended only for MSA accounts, a validation issue allowed this key to be trusted for signing Azure AD tokens. This issue has been corrected.\u201d<\/p>\n