Download Learnerz IAS app from the Play Store now! Download



Storm-0558 UPSC NOTE


  • In July, Microsoft reported that a China-based hacking group named Storm-0558 had breached U.S. government-linked email accounts. 

  • The attack affected 25 organizations, including Western European government agencies and email accounts of top American officials.

  • The breach originated from the compromise of a Microsoft engineer's corporate account, allowing the hackers to extract a cryptographic key used to access email accounts.

  • Microsoft Threat Intelligence assessed Storm-0558 as a China-based threat actor engaged in espionage activities. 

  • The group operates independently, with working hours consistent with those in China.

  • Storm-0558 has historically targeted U.S. and European diplomatic, economic, and legislative bodies, as well as individuals associated with Taiwan and Uyghur geopolitical interests.

  • The group has been targeting Microsoft accounts since August 2021, using phishing campaigns and exploiting vulnerabilities in public-facing applications for initial access.

Breach of Microsoft's Security:

  • Storm-0558 compromised Microsoft's cloud security systems by acquiring an MSA key, which was used to forge tokens for access to Outlook Web Access (OWA), Microsoft's web-based mail client.

  • MSA keys are token signing keys used for authentication, and the acquired key was used to impersonate Azure AD users and gain access to enterprise email.

Cryptographic Key Explanation:

  • A cryptographic key is a character string used in encryption algorithms to encrypt and decrypt data. 

  • It ensures that data is secure and can only be accessed by those with the correct key.

  • There are two types of encryption: symmetric and asymmetric

  • Symmetric encryption uses the same key for both encryption and decryption, while asymmetric encryption uses different keys, with the private key kept secret.



Amritsar,1,April 2024,301,Art & Culture,1,August 2023,251,Courses,7,Daily Current Affairs,48,December 2023,189,Disaster Management,2,Environment and Ecology,193,February 2024,228,Foundation Course,1,GDP,1,GEMS Club,1,GEMS Plus,1,Geography,191,Govt Schemes,2,GS 2,1,GS1,6,GS2,68,GS3,26,GST,1,History,11,Home,3,IAS Booklist,1,Important News,71,Indian Economy,173,Indian History,10,Indian Polity,202,International Organisation,12,International Relations,143,Invasive Plant,1,January 2024,240,July 2023,281,July 2024,230,June 2022,6,June 2023,268,June 2024,324,March 2024,238,May 2022,17,May 2024,330,Mentorship,2,November 2023,169,October 2023,203,Places in News,2,Science & Technology,135,Science and Technology,95,September 2023,205,UPSC CSE,111,
Learnerz IAS | Concept oriented UPSC Classes in Malayalam: Storm-0558 UPSC NOTE
Storm-0558 UPSC NOTE
Learnerz IAS | Concept oriented UPSC Classes in Malayalam
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share to a social network STEP 2: Click the link on your social network Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy Table of Content