ExfilSquad 宣称攻破 Microsoft,但证据仍未得到核实
该新的勒索行为体一次性发布了15条受害者声明,研究人员表示,这种模式更符合批量发起或伪造。
By Ryan Merket · Published
Primary source: International Cyber Digest
为何重要
ExfilSquad 展示了一个新的勒索行为体如何利用知名目标在证明已获取访问权限之前制造压力。如果声称的身份数据是真实的,它可能助长网络钓鱼和针对供应商的攻击。

ExfilSquad claimed on July 26th that it stole data from Microsoft, but three days later the purported breach remains unverified. Researchers examining the newly surfaced extortion actor have found no evidence establishing that the files came from Microsoft's systems or that ExfilSquad gained access to Microsoft's network.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.