<p><img src="https://static6.businessinsider.com/image/603f49f82dc90100183550ee-2400/GettyImages-1230794251.jpg" border="0" alt="GettyImages 1230794251" data-mce-source="SOPA Imagines/Getty Images" data-mce-caption="Microsoft shares rose in pre-market trading after its sales jumped"></p><p></p><bi-shortcode id="summary-shortcode" data-type="summary-shortcode" class="mceNonEditable" contenteditable="false">Summary List Placement</bi-shortcode><p>Microsoft announced Tuesday that its Exchange email product had been hacked, and that it believes China is behind the attack.</p><p>Tom Burt, Microsoft's corporate vice president of customer security and trust, <a href="https://blogs.microsoft.com/on-the-issues/2021/03/02/new-nation-state-cyberattacks/">wrote in a blog post</a> that the company had identified a "state-sponsored threat actor" it referred to as "Hafnium."</p><p>Hafnium, he said, typically uses virtual servers located in the US to infiltrate vulnerable institutions, including infectious-disease researchers, law firms, higher education institutions, and NGOs.</p><p>According to Burt, the hacking group took advantage of several security vulnerabilities within the email client to steal data and plant malware, and more alarmingly, to compromise servers running Exchange.</p><p>Once Hafnium made its way inside company servers, it could create a "web shell" to control servers remotely and steal data from company networks.</p><p>In addition to the warning, Microsoft also released <a href="https://msrc-blog.microsoft.com/2021/03/02/multiple-security-updates-released-for-exchange-server">several security updates</a> designed to combat the hacks, but noted that "even though we've worked quickly to deploy an update for the Hafnium exploits, we know that many nation-state actors and criminal groups will move quickly to take advantage of any unpatched systems."</p><p>Burt also noted that Exchange server is "primarily used by business customers" and said that there was "no evidence" that Hafnium was targeting individual consumers or that any other Microsoft products were impacted. He also said that the attack was not believed to be related to prior <a href="http://www.businessinsider.com/category/solarwinds">SolarWinds</a> hacks.</p><p>Chinese Foreign Ministry spokesman Wang Wenbin responded to Microsoft's accusations in a Wednesday press briefing, saying there was not enough evidence to draw a conclusion on the Exchange hack's origins, according to <a href="https://www.bloomberg.com/news/articles/2021-03-02/microsoft-says-china-linked-group-targets-exchange-email'sref=BLKWHazc">Bloomberg</a>.</p><p>This is the eighth time in the last 12 months that Microsoft has publicly reported state-sponsored hacks. </p><p><a href="https://www.businessinsider.com/microsoft-accuses-china-exchange-email-hack-2021-3#comments">Join the conversation about this story »</a></p> <p>NOW WATCH: <a href="https://www.businessinsider.com/what-its-like-make-beer-with-picobrew-c-home-brew-2020-3">We tested a machine that brews beer at the push of a button</a></p>
Click here to read full news..
