Microsoft investigates claims that its GitHub account has been hacked

Microsoft confirmed that it is investigating claims that its GitHub account has been hacked after some of its files were leaked online.

Microsoft launched an investigation into the claims that its GitHub account has been hacked.

Recently some files allegedly stolen from the Microsoft Github account have been leaked online, and they appear to be legitimate.

The data leak was first reports on May 6 by experts at the data breach monitoring Under the Breach, a hacker claimed to have obtained 500 GB of source code from Microsoft’s private GitHub repositories.

The guy behind the hack is the same that recently leaked 15 million records stolen from Indonesian e-commerce giant Tokopedia.

Under the Breach analyzed the data and determined that the files were likely legitimate.

The dump includes source code for Azure, Office, and some Windows runtime files and APIs. Under the Breach, who verified the dump, said that it did not appear to include anything sensitive data, anyway it could hold keys and passwords left by mistake in the code.

According to the image shared by hacker, the data are dated March 28, 2020.

According to a post published on a hacker forum, the hacker is offering a 54 GB compressed archive (500 GB uncompressed).

Please vote Security Affairs for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERS
https://docs.google.com/forms/d/e/1FAIpQLSe8AkYMfAAwJ4JZzYRm8GfsJCDON8q83C9_wu5u10sNAt_CcA/viewform

[adrotate banner=”9″]

[adrotate banner=”12″]

Pierluigi Paganini

(SecurityAffairs – GitHub, hacking)

[adrotate banner=”5″]

[adrotate banner=”13″]

Pierluigi Paganini

Pierluigi Paganini is member of the ENISA (European Union Agency for Network and Information Security) Threat Landscape Stakeholder Group and Cyber G7 Group, he is also a Security Evangelist, Security Analyst and Freelance Writer. Editor-in-Chief at "Cyber Defense Magazine", Pierluigi is a cyber security expert with over 20 years experience in the field, he is Certified Ethical Hacker at EC Council in London. The passion for writing and a strong belief that security is founded on sharing and awareness led Pierluigi to find the security blog "Security Affairs" recently named a Top National Security Resource for US. Pierluigi is a member of the "The Hacker News" team and he is a writer for some major publications in the field such as Cyber War Zone, ICTTF, Infosec Island, Infosec Institute, The Hacker News Magazine and for many other Security magazines. Author of the Books "The Deep Dark Web" and “Digital Virtual Currency and Bitcoin”.