#midnight-blizzard
1 case
Midnight Blizzard (APT29): Russian State-Sponsored Breach of Microsoft Corporate SystemsState-SponsoredData Breach
Russian state-sponsored group Midnight Blizzard (APT29) breached Microsoft's corporate environment via password spray against a legacy non-production test tenant, accessed executive and security team email, and exfiltrated OAuth tokens and source code — demonstrating sophisticated identity-based tradecraft without malware.
State-SponsoredData Breach