Skip to main content

Microsoft removed 18 Azure AD apps used by Chinese state-sponsored hacker group

posted onSeptember 24, 2020
by l33tdawg
ZDNet
Credit: ZDNet

Microsoft said today that it removed 18 Azure Active Directory applications from its Azure portal that were created and abused by a Chinese state-sponsored hacker group.

The 18 Azure AD apps were taken down from the Azure portal earlier this year in April, the Microsoft threat intelligence team said in a report published today.

The report described the recent tactics used by a Chinese hacker group known as Gadolinium (aka APT40, or Leviathan). The Azure apps were part of the group's 2020 attack routine, which Microsoft described as "particularly challenging" to detect due to its multi-stage infection process and the broad use of PowerShell payloads.

Source

Tags

Security

You May Also Like

Recent News

Friday, November 1st

Tuesday, July 9th

Wednesday, July 3rd

Friday, June 28th

Thursday, June 27th

Thursday, June 13th

Wednesday, June 12th

Tuesday, June 11th

Friday, June 7th

Thursday, June 6th