Expired50% confidenceFactExact time
Microsoft attributed this attack to a China-backed hacking group and noted that its objectives were clearly espionage in nature rather than purely ransomware for profit.
1
Sources
50%
Confidence
Short-term (~14 days)
Relevance
10/22/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 11/5/2026(expired)
Sources
Related Entities
Related Claims
UnverifiedThe Storm-0558 attack incident disclosed by Microsoft in 2023 revealed that Chinese hackers obtained Microsoft signing keys and infiltrated the mailboxes of senior officials, including the U.S. Secretary of Commerce.76% similarUnverifiedMicrosoft points to a China-aligned hacking group as the mastermind behind the ConnectWise data breach.74% similarUnverifiedThe joint advisory AA26-281A describes the attackers as a Chinese government-linked cyber threat actor that, relying on capabilities provided by Integrity Technology Group, combines automated scanning tools, large-scale botnets, and manual penetration techniques to target organizations worldwide and steal sensitive data.70% similarUnverifiedMicrosoft and Japan's National Police Agency jointly carried out an investigation operation and successfully dismantled a criminal marketplace platform that provided SMS-sending services for scammers.66% similarUnverifiedCommercial spyware vendors are keen to exploit baseband vulnerabilities for targeted surveillance of journalists, activists, and political figures.64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1086378API
curl https://kongchang.com/api/v1/knowledge/claims/1086378MCP
get_claim(id=1086378)