{"id":15104,"date":"2019-04-16T08:10:19","date_gmt":"2019-04-16T16:10:19","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2019\/04\/16\/news-8853\/"},"modified":"2019-04-16T08:10:19","modified_gmt":"2019-04-16T16:10:19","slug":"news-8853","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2019\/04\/16\/news-8853\/","title":{"rendered":"Hackers snab emails and more in Microsoft Outlook, Hotmail, and MSN compromise"},"content":{"rendered":"

Credit to Author: Christopher Boyd| Date: Tue, 16 Apr 2019 15:30:20 +0000<\/strong><\/p>\n

Long-time users of certain Microsoft products, such as Hotmail, MSN, and Outlook found they may be wrapped up in a hack<\/a> grabbing snippets of email information, and in some cases, a little bit more.<\/p>\n

Microsoft email services have been around forever in Internet time. Yet, many users still have a few Hotmail accounts rattling around. While most have long since moved on from MSN and Hotmail to Live and Outlook, all of these email accounts are still chugging away in one form or another.<\/p>\n

Perhaps it\u2019s an email you\u2019ve pretty much grown up with and don\u2019t want to let go. Maybe your old Microsoft-supplied email address is tied into large portions of the MS ecosystem, and you\u2019d rather not start trying to reinvent the wheel. It could be you just appreciate the novelty of having a legacy email address, which is becoming rarer with each passing moment.<\/p>\n

No matter your angle, and regardless of your stance on whether a Hotmail account is even a good idea anymore<\/a>, people still make use of them.<\/p>\n

This is where our tale of compromise woe begins.<\/p>\n

What happened?<\/h3>\n

A customer support agent was compromised by hackers<\/a> and used to gain access to certain pieces of email data. If your account was for business, you\u2019re safe. If it was a free personal account, however, it might have been affected. As per the notification email from Microsoft, which appears to have gone out over the weekend<\/a>:<\/p>\n

\n

Dear customer,<\/em><\/p>\n

We have identified that a Microsoft support agent\u2019s credentials were compromised, enabling individuals outside Microsoft to access information without your Microsoft email account. This unauthorised access could have allowed unauthorised parties to access and \/ or view information related to your email account (such as your email address, folder names, the subject lines of emails, and the names of other email addresses you communicate with), but not the content of any emails or attachments, between January 1st 2019 and March 28th 2019.<\/em><\/p>\n<\/blockquote>\n

While Microsoft stated that no email content was pilfered, a little while after their initial reveal, they had to update their warnings to state that about 6 percent of the total affected users had, in fact, had email body content accessed.<\/p>\n

Microsoft hasn\u2019t revealed how many users in total were affected during the attack, which took place between January 1 and March 28, but actual email content accessed is a significant step up in severity from subject lines and contacts.<\/p>\n

What steps did Microsoft take?<\/h3>\n

Once the attack was brought to Microsoft’s attention, they shut it down quickly. Going back to their notification email:<\/p>\n

\n

Upon awareness of this issue, Microsoft immediately disabled the compromised credentials, prohibiting their use for any further unauthorised access…it is important to note that your email login credentials were not directly impacted by this incident. However, out of caution, you should reset your password for your account.<\/em><\/p>\n<\/blockquote>\n

They also advised users to be wary of phishing attacks<\/a> and social engineering<\/a> tactics in general. All the same, information is a little thin on the ground.<\/p>\n

As TechCrunch notes<\/a>, Microsoft hasn\u2019t revealed if the support account was a third party or belonged to a Microsoft employee, or which regions were impacted\u2014aside from a reference to the EU in one of the emails.<\/p>\n

Additionally, Microsoft claims this took place over three months; an informant for Motherboard reckons it was more like six (which Microsoft denies).<\/p>\n

Next steps?<\/h3>\n

At this point, we\u2019d usually suggest security tips along the lines of changing your passwords<\/a>, but this attack is tricky because it didn\u2019t involve credentials. It seems no matter how locked down your account was, the method of attack allowed hackers to see what they wanted to see.<\/p>\n

As Microsoft suggests, feel free to change your password if it makes you feel more reassured. If you want to boost your online webmail account security<\/a>, there\u2019s never been a better time to begin. You might also want to rethink hanging onto those dinosaur, legacy accounts, as they are huge targets for cybercriminals.<\/p>\n

The biggest risk from this attack is most likely to the small number of users<\/span> whose full email content was viewable by the hackers. With any luck, what they saw is hopefully nothing too sensitive. For our part, we recommend checking out our suggestions for spotting dubious emails<\/a> to cover any potential social engineering or phishing attempts spurred by this attack.<\/p>\n

It\u2019s definitely bad, but it could\u2019ve been a lot worse. The lesson we can hopefully learn from this one: Be thankful for small mercies.<\/p>\n

The post Hackers snab emails and more in Microsoft Outlook, Hotmail, and MSN compromise<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Christopher Boyd| Date: Tue, 16 Apr 2019 15:30:20 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
Hackers made use of a compromised Microsoft support agent’s credentials to sneak a peek at its users’ Hotmail, MSN, and Outlook emails. How bad is it, and what has Microsoft done to correct it?<\/p>\n

Categories: <\/p>\n