欢迎来到国际知识中心
Microsoft Outlook hack gave full access to email contents - CNET
Microsoft Outlook on a smartphone screen

Microsoft sent a warning to Outlook users detailing a hack that lasted from Jan. 1 to March 28. 

Josh Miller/CNET

Microsoft's Outlook hack is worse than the company originally warned.

Despite Microsoft's initial notification to affected Outlook users on Friday, a follow-up statement added that hackers were able to read email content.

The company first released a statement on Friday to Outlook users, notifying people that a hacker had had access to emails for months after stealing login credentials for a Microsoft customer support agent.

The breach, first reported by TechCrunch, allowed potential hackers to access people's emails and read folder names, subject lines and names of other email addresses. Microsoft said it's since disabled stolen access to the hacked customer support agent's account.

The hacker had access to email accounts from Outlook, MSN and Hotmail between Jan. 1 and March 28, Microsoft said. The hack did not affect enterprise accounts, it added.

"We addressed this scheme, which affected a limited subset of consumer accounts, by disabling the compromised credentials and blocking the perpetrators' access," Microsoft said in a statement. 

The company did not state how many people were affected, but said it was "a limited number of consumer accounts."

In its first notification to customers, Microsoft said no login credentials were stolen and that the attackers could not read the contents of emails.

Microsoft was forced to revise its statement after Motherboard found that the attackers had full access to email content. The company did say that potential hackers could only read full email content for about 6% of affected Outlook users.

In response to the breach, Microsoft is warning affected people to watch out for phishing emails, and recommends that people change their password. In a blog post from April, Microsoft said that it saw an average of 300,000 phishing attempts in February alone. 

Originally published April 15, 7:14 a.m. PT.
Update, 9:07 a.m.: Adds response from Microsoft. 

Original Text (This is the original text for your reference.)

Microsoft Outlook on a smartphone screen

Microsoft sent a warning to Outlook users detailing a hack that lasted from Jan. 1 to March 28. 

Josh Miller/CNET

Microsoft's Outlook hack is worse than the company originally warned.

Despite Microsoft's initial notification to affected Outlook users on Friday, a follow-up statement added that hackers were able to read email content.

The company first released a statement on Friday to Outlook users, notifying people that a hacker had had access to emails for months after stealing login credentials for a Microsoft customer support agent.

The breach, first reported by TechCrunch, allowed potential hackers to access people's emails and read folder names, subject lines and names of other email addresses. Microsoft said it's since disabled stolen access to the hacked customer support agent's account.

The hacker had access to email accounts from Outlook, MSN and Hotmail between Jan. 1 and March 28, Microsoft said. The hack did not affect enterprise accounts, it added.

"We addressed this scheme, which affected a limited subset of consumer accounts, by disabling the compromised credentials and blocking the perpetrators' access," Microsoft said in a statement. 

The company did not state how many people were affected, but said it was "a limited number of consumer accounts."

In its first notification to customers, Microsoft said no login credentials were stolen and that the attackers could not read the contents of emails.

Microsoft was forced to revise its statement after Motherboard found that the attackers had full access to email content. The company did say that potential hackers could only read full email content for about 6% of affected Outlook users.

In response to the breach, Microsoft is warning affected people to watch out for phishing emails, and recommends that people change their password. In a blog post from April, Microsoft said that it saw an average of 300,000 phishing attempts in February alone. 

Originally published April 15, 7:14 a.m. PT.
Update, 9:07 a.m.: Adds response from Microsoft. 

Comments

    Something to say?

    Log in or Sign up for free

    Disclaimer: The translated content is provided by third-party translation service providers, and IKCEST shall not assume any responsibility for the accuracy and legality of the content.
    Translate engine
    Article's language
    English
    中文
    Pусск
    Français
    Español
    العربية
    Português
    Kikongo
    Dutch
    kiswahili
    هَوُسَ
    IsiZulu
    Action
    相关新闻

    Report

    Select your report category*



    Reason*



    By pressing send, your feedback will be used to improve IKCEST. Your privacy will be protected.

    Submit
    Cancel