Hackers Backed By Iran Targeted Presidential Campaign, Microsoft Says
WASHINGTON – Hackers backed by the Iranian government have been targeting the email accounts of at least one presidential campaign, current and former federal government officials and journalists covering political campaigns, Microsoft revealed Friday.
In a blog post on its website, the tech giant says that over a 30-day period between August and September, the Microsoft Threat Intelligence Center observed a group it has dubbed “Phosphorus” making more than 2,700 attempts to identify consumer email accounts belonging to specific Microsoft customers and then attack 241 of those accounts.
“While the attacks we’re disclosing today were not technically sophisticated, they attempted to use a significant amount of personal information both to identify the accounts belonging to their intended targets and in a few cases to attempt attacks,” Tom Burt, corporate vice president of Customer Security and Trust at Microsoft, wrote in the post.
“This effort suggests Phosphorous is highly motivated and willing to invest significant time and resources engaging in research and other means of information gathering,” he said.
Microsoft has not revealed the name of the presidential campaign, but its disclosure is just more evidence that U.S. adversaries are now picking up where Russia’s interference in the 2016 United States presidential election left off.
Burt said that Phosphorus used information gathered from researching their targets or other means to game password reset or account recovery features and attempt to take over some targeted accounts.
For example, they would seek access to a secondary email account linked to a user’s Microsoft account, then attempt to gain access to a user’s Microsoft account through verification sent to the secondary account.
In some instances, they gathered phone numbers belonging to their targets and used them to assist in authenticating password resets.
The company says four accounts were compromised as a result of these attempts. The four accounts were not associated with the U.S. presidential campaign or current and former U.S. government officials.
In addition to helping to secure those accounts, Microsoft’s Digital Crimes Unit has also taken legal and technical steps to combat Phosphorus attacks.
“We continue to take these types of actions,” Burt wrote.
Microsoft also reminded its customers that there are steps they can take to help secure their accounts. It is encouraging all customers to enable two-step verification on their accounts which can be done in Account Security settings.
In The News
WASHINGTON (AP) — Democrats in the House appear on the verge of advancing President Joe Biden’s $1.85 trillion-and-growing domestic policy package alongside... Read More
WASHINGTON (AP) — Democrats in the House appear on the verge of advancing President Joe Biden’s $1.85 trillion-and-growing domestic policy package alongside a companion $1 trillion infrastructure bill in what would be a dramatic political accomplishment — if they can push it to passage. The House scrapped votes... Read More
TRENTON, N.J. —The nail biter is over. New Jersey Gov. Phil Murphy has been elected to a second term in... Read More
TRENTON, N.J. —The nail biter is over. New Jersey Gov. Phil Murphy has been elected to a second term in the state’s highest office. As of Thursday morning, the Democratic incumbent was leading Republican challenger Jack Ciattarelli by 37,293 votes, with 91% of the state’s election... Read More
ROME (AP) — President Joe Biden wrapped up his time at the Group of 20 summit on Sunday trying to... Read More
ROME (AP) — President Joe Biden wrapped up his time at the Group of 20 summit on Sunday trying to convince Americans and the wider world that he's got things under control — and taking Russia, China and Saudi Arabia to task for not doing enough... Read More
DETROIT (AP) — A federal judge is considering whether to order financial penalties or other sanctions against some of former... Read More
DETROIT (AP) — A federal judge is considering whether to order financial penalties or other sanctions against some of former President Donald Trump's lawyers who signed onto a lawsuit last year challenging Michigan's election results. The lawsuit alleging widespread fraud was voluntarily dropped after a judge... Read More
WASHINGTON -- A powerful congressional committee is beginning an investigation into reports the Justice Department secretly subpoenaed information about members... Read More
WASHINGTON -- A powerful congressional committee is beginning an investigation into reports the Justice Department secretly subpoenaed information about members of Congress and journalists during the Trump administration. The committee’s chairman said he was concerned the Justice Department “used criminal investigations as a pretext to spy... Read More
ATLANTA (AP) — Amber McReynolds, CEO of The National Vote at Home Institute, helped state and local election officials prepare... Read More
ATLANTA (AP) — Amber McReynolds, CEO of The National Vote at Home Institute, helped state and local election officials prepare for the record number of mailed ballots cast during last year's presidential election. She also was recently confirmed by the Senate to serve on the Board... Read More