Chinese Hackers Used Malware On Microsoft Technet Website To Target Other Websites
Hackers used the TechNet web portal to host IP addresses for command and control (C&C) servers. The IP addresses for C&C servers were encoded by attackers, the encoded string is found in profiles and posts limited with the “@MICROSOFT” and “Corporation” tags. Microsoft, after receiving information from FireEye about the APT threat has plugged the security exploit. The group, which FireEye has dubbed APT17 is well-known for attacks against defense contractors, law firms, U....