By Frank Fang
The European Banking Authority (EBA) is the latest victim of a large-scale cyber-hacking attack connected to the Chinese regime against Microsoft’s email and calendar server.
Early last week, Microsoft announced via a blog post that Hafnium, a state-sponsored hacking group operating from China, exploited flaws in its Exchange Server software. Three versions of the software were affected—2013, 2016, and 2019—and the U.S. software giant released emergency security patches to address the security holes.
Microsoft explained that the Hafnium hackers were using the flaws to access email accounts and install malware to “facilitate long-term access to victim environments.”
Soon after, U.S.-based cybersecurity firm FireEye reported that the hacking group targeted a number of American targets, including “U.S.-based retailers, local governments, a university, and an engineering firm.”
On Sunday, the EBA, an EU financial regulator, announced that its email systems were compromised by the cyberattack.
“As the vulnerability is related to the EBA’s email servers, access to personal data through emails held on that servers may have been obtained by the attacker,” the EBA said in a statement.
On March 8, the EBA released another statement saying that its investigation was ongoing.
“At this stage, the EBA email infrastructure has been secured and our analyses suggest that no data extraction has been performed and we have no indication to think that the breach has gone beyond our email servers,” it said.
The EBA was not the only known victim. The city government of Lake Worth Beach in Florida said that its email server was down for about three days since March 3 as a result of the cyberattack, according to the local daily the Palm Beach Post.
The cyberattack has also drawn the concerns of the Biden administration. White House National Security Adviser Jake Sullivan wrote via Twitter on Thursday calling on network owners to apply the patches quickly while offering recommendations if their systems were compromised.
“This is an active threat,” said White House press secretary Jen Psaki on Friday. “Everyone running these servers—government, private sector, academia—needs to act now to patch them.”
“We are concerned that there are a large number of victims and are working with our partners to understand the scope of this,” Psaki added.
On Saturday, the Federal Bureau of Investigation said it was “working closely with our interagency and private sector partners to understand the scope of the threat.”
On March 8, the U.S. Department of Homeland Security’s cybersecurity agency took to Twitter asking “all organizations across all sectors” to follow its guidelines to address vulnerabilities within their Microsoft Exchange Server software.
At a daily briefing on March 3, China’s foreign ministry spokesperson Wang Wenbin rejected Microsoft’s claims. He added that media and companies should not “make groundless accusations.”
There have been previously known Chinese cyberattacks against U.S. entities.
In February last year, the U.S. Department of Justice indicted four members of the Chinese military for hacking the online systems of U.S. credit-reporting agency Equifax in 2017. The hackers stole names, birth dates, and social security numbers for about 145 million Americans.
The U.S. Office of Personnel Management was the target of a Chinese cyberattack in 2015, which resulted in the stolen records of about 4.2 million current and former federal employees.
Affiliate News Feeds
- Washington Examiner
- The Federalist
- The Epoch Times
- The Guardian
- The Gateway Pundit
- Judicial Watch
By Tom Ozimek Elon Musk suggested that Twitter was acting under government orders to suppress free speech, with his remarks coming hot on the heels of the release of a trove of… [...]
By The Associated Press PALMDALE , Calif.—America’s newest nuclear stealth bomber made its debut Friday after years of secret development and as part of the Pentagon’s answer to rising concerns over a future… [...]
Union workers are lashing out at both political parties and President Joe Biden for the rail legislation signed to prevent a strike, calling the provisions a "slap in the face"… [...]
A former professor at the University of California San Diego said she gave all of her students "A" grades and no homework in a recently unearthed video. [...]
Usually when a person defrauds investors of millions of dollars and launders the funds to personal pet projects, he goes to jail. (See: Bernie Madoff.) But in FTX founder Sam… [...]
Insider documents released on Friday confirm Twitter’s decision to suppress the New York Post’s legitimate reporting about Hunter Biden’s laptop mere weeks before the 2020 presidential election was a political… [...]
A Department of Justice (DOJ) watchdog is seeking an independent examination into the collapse of cryptoexchange FTX, according to a recent court filing. The Justice Department is already investigating the… [...]
The State of Wyoming filed a second lawsuit against the Biden Administration, alleging that its suspension of oil lease sales were illegal. Gov. Mark Gordon (R-Wyom.) announced that his state… [...]
Minister says troops are on standby to replace striking ambulance workers and border staffThe Conservative party chairman has said the military is on standby to take the place of striking… [...]
Exclusive: Stage sequel to focus on then housing secretary, fire chief and two families devastated by 2017 fireA play dramatising the “merry-go-round of buck-passing” at the Grenfell Tower public inquiry… [...]
Over the last few years, the U.S. Military has been politicized by the left. This is having the unfortunate effect of eroding the public’s trust in the institution. Just in… [...]
In Elon Musk’s most recent Twitter Space, Musk shared how he felt about Ye’s recent Twitter ban. The usually calm and collected Musk let out a rare burst of raw… [...]
From Fox News: The Secret Service will not say why they changed their position regarding a government watchdog’s records request into Hunter Biden’s gun investigation records. Government watchdog Judicial Watch… [...]