Microsoft Accuses China-Based Hackers of Breaching Email Accounts of 25 Organizations, Including Government Agencies

The software giant revealed that the hackers, who go by the name Storm-0558, infiltrated the accounts by forging digital authentication tokens required by the system.

The tokens are typically used to verify a person's identity.

The US Department of Commerce has confirmed that Microsoft notified it about the attack, and Secretary of Commerce Gina Raimondo was among the individuals impacted by the breach.

The Department of Commerce said it took immediate action to respond to the incident and is monitoring its systems for any further activity.

The State Department was also reportedly targeted by the hackers, although it has not yet responded to queries from the BBC.

The embassy of China in London, meanwhile, dismissed the accusation as "disinformation" and called the US government "the world's biggest hacking empire and global cyber thief." Microsoft said the hacking group primarily targets government agencies in Western Europe and focuses on espionage, data theft, and credential access.

The company added that it has mitigated the attack and contacted the impacted customers.

It also claimed to have found no evidence of further access.

In May, Microsoft and Western spy agencies reported that Chinese hackers had used "stealthy" malware to attack critical infrastructure on American military bases in Guam.

The incident was described as one of the largest known cyber espionage campaigns against the US.

China has repeatedly denied involvement in hacking operations despite evidence to the contrary.

The country's embassy in London called the Microsoft report "highly unprofessional" and "disinformation." Experts say that the latest hacking incident underscores the ongoing tensions between the US and China over cyber security issues.

The two nations have been at odds over allegations of cyber espionage and theft of intellectual property for years.

The US has accused China of sponsoring cyber attacks on American companies and government agencies to steal trade secrets and other sensitive information.

The incident also highlights the growing threat of cyber attacks on critical infrastructure, which can have significant consequences for national security and public safety.

It is crucial for organizations and governments to