ExfilSquad claims Microsoft breach, but the evidence remains unverified
The new extortion actor published 15 victim claims in one burst, a pattern researchers say is more consistent with a bulk launch or fabrication.
By Ryan Merket · Published
Primary source: International Cyber Digest
Why it matters
ExfilSquad shows how a new extortion actor can use a famous target to manufacture pressure before proving access. If the claimed identity data is real, it could fuel phishing and supplier attacks.
ExfilSquad claimed on July 26th that it stole data from Microsoft, but three days later the purported breach remains unverified. Researchers examining the newly surfaced extortion actor have found no evidence establishing that the files came from Microsoft's systems or that ExfilSquad gained access to Microsoft's network.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.