# Microsoft hack shows how to lose and win the cyberwar (HT Tech)

> Speaking at a computer security conference four years ago, Microsoft Corp.’s president, Brad Smith, warned that digital theft and sabotage had taken a darker turn.

# Microsoft hack shows how to lose and win the cyberwar

## Speaking at a computer security conference four years ago, Microsoft Corp.’s president, Brad Smith, warned that digital theft and sabotage had taken a darker turn.

Mar 09 2021, 22:35 IST

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook.png)

![Follow on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/follow-us-facebook-hover.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Share.png)

![Share](https://images.hindustantimes.com/tech/static/revamp/images/png/Shareclicked.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp.png)

![Share on WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/whatsapp-hover.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter.png)

![Share on Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/twitter-hover.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook.png)

![Share on Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/facebook-hover.png)

![Bookmark](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmark.png)

![Bookmarked](https://images.hindustantimes.com/tech/static/revamp/images/png/Bookmarked.png)

![Microsoft.](https://images.hindustantimes.com/tech/img/2021/03/09/1600x900/2021-01-25T183532Z_1840849669_RC26FL9HY88A_RTRMADP_3_MICROSOFT-RESULTS_1611673607349_1611673693110_1615309425727.JPG)

Microsoft. (Reuters )

![Author Photo](https://images.hindustantimes.com/tech/static/revamp/images/png/HTTech-new-circle-logo.png)

### By BLOOMBERG

Speaking at a computer security conference four years ago, Microsoft Corp.’s president, Brad Smith, warned that digital theft and sabotage had taken a darker turn. Nation-states, he said, had become increasingly aggressive and ubiquitous hackers, targeting so many facets of private and public life that “nothing seems off limits.”

Smith noted that Microsoft had institutionalized cyber warfare reconnaissance by establishing an internal Threat Intelligence Center and was making use of behavioral analysis, machine learning, forensics and data to bulletproof its products and services. To counterattack, he called for greater collaboration between the public and private sectors, sought greater corporate transparency about hacks and asked leading governments to embrace a “Digital Geneva Convention” that would set global limits around digital espionage and disruption.

Little of that came to pass beyond Microsoft’s walls. And Smith found himself sounding many of the same warnings again in congressional hearings less than two weeks ago in the wake of the massive SolarWinds hack. Then, because fate is a vengeful thing, Microsoft disclosed last week that it was at the center of a sprawling hack engineered by China that began Jan. 3 but had only been uncovered recently.

Also read

click here.

Also read: China’s Microsoft hack, Russia’s SolarWinds attack threaten to overwhelm US

In a brutal twist, Microsoft’s disclosure, and its effort to patch up the breach of email software it sells to businesses, inspired the hackers to accelerate their attacks before they were expelled. By Monday, at least 60,000 victims had been hacked worldwide, many of them small to medium-size businesses and public enterprises such as airports, local governments, police, prisons, hospitals and Covid-19 response teams. It’s a staggering number, though it’s likely that only a small percentage of those will suffer a damaging intrusion and data loss.

Yes, Microsoft should have done better. Hackers found a vulnerability in the company’s web-facing Exchange product it had overlooked, and that allowed them to sneak on to tens of thousands of email servers. The fixes Microsoft has sent to customers aren’t disinfectants: They will keep new hackers from burgling, but predators who already made it inside could still be lurking on a network. Victims will have to strip down their systems to see if malware remains, a painstaking process that can overwhelm smaller firms.

It’s ugly. But Microsoft is an inevitable target due to its size. Unlike most of its major counterparts, it also has been willing to go public with information that might build alliances able to battle government-sponsored hackers more effectively. And it’s taken the risky – and courageous — step of repeatedly identifying countries such as Iran, North Korea, Russia and China that it believes are orchestrating assaults, even when other big companies stay mum. Amazon.com Inc., for example, declined to testify at the SolarWinds hearings, even though hackers used its cloud computing operation’s servers to stage digital assaults. (China has denied that it’s behind the Microsoft hack.)

Although the vast majority of nation-state hacks still rely on rudimentary phishing schemes and password spraying to penetrate networks, the SolarWinds and Microsoft attacks were unusually automated, stealthy and sophisticated – which may suggest we’ve entered an era of more potent assaults that will be hard for any company or public entity to fend off independently. Remember: The National Security Agency itself only became aware of the SolarWinds hack (which penetrated nine federal agencies and at least 100 companies globally) when a private company discovered it several months after it began.

Microsoft said that the hackers who zapped it were part of a China-sponsored consortium it labeled as “Hafnium.” Those hackers have reportedly targeted infectious disease researchers, attorneys, higher education, defense contractors, think tanks and non-governmental organizations. While Hafnium has the Chinese government’s support, it operates from servers it leases inside the U.S., according to Microsoft.

In its “2021 Threat Report,” BlackBerry Ltd., an enterprise software company, said that independent cyber criminals have become so exceptionally adept that nation-states are farming out their hacking operations to them. Subcontracting digital assaults offers countries deniability and more muscle, akin to the reasons why governments like the U.S. hire private military contractors to do some of the dirty work in war zones.

It’s not just the big guys that hackers relish. Among the targets they might consider, according to BlackBerry, are “connected vehicles.” You know, the car you drive around that might have Google Maps or Apple Maps displaying on your dashboard, receive phone calls from your mobile provider, or stream music from your Spotify account. There are 280 million on-road automobiles that are currently internet-connected, according to BlackBerry.

But it’s the large-scale assaults that have already happened that should have propelled tougher countermeasures a long time ago. Consider the Saudi Aramco hack in 2015 that savaged about 35,000 computers and threatened to derail the global oil market, or the 2017 hack of Ukraine’s digital infrastructure that unspooled into global information networks and the maritime industry.

Beating back this sort of chaos requires pointed federal leadership. The Biden administration has prioritized cybersecurity and has promised a robust response to Russia’s launch of the SolarWinds hack. Congress, guided by leaders like Senator Mark Warner, is considering legislation that would require companies to adopt many of the proactive measures Microsoft has recommended.

Analysts have repeatedly said that corporations and governments need to become more vigilant and sophisticated about network security and attack responses. While traditional defenses, such as firewalls, air gaps, encryption and network monitoring remain indispensable, analysts also say that companies and government enterprises should adopt “zero-trust” policies that require elaborate authentication of anyone using a network’s services.

That means that users themselves have to be told – and be willing – to adopt multi-factor authentication (like the separate digital keys everyone hates to use when they log in to their computers, or temporary codes sent to mobile devices). Some companies are planning to move away from passwords entirely in favor of other forms of identification, such as biometrics, in the belief that almost all hacks can be stalled if security hygiene is heightened.In the meantime, there’s digital warfare raging and it’s not going to end anytime soon.

This column does not necessarily reflect the opinion of the editorial board or Bloomberg LP and its owners.

Written by Timothy L. O'Brien.

Catch all the Latest Tech News, Mobile News, Laptop News, Gaming news, Wearables News , How To News, also keep up with us on Whatsapp channel,Twitter, Facebook, Google News, and Instagram. For our latest videos, subscribe to our YouTube channel.

09 Mar, 22:35 IST

### Related Stories

29 Sept 2026

71,615,309,391,287

NEXT ARTICLE BEGINS

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Tips & Tricks

![Ghibli-style art](https://images.hindustantimes.com/tech/img/2025/03/28/414x233/ChatGPT_Ghibli_style_images_1743161814450_1743161814596.jpg)

### How to turn your photos into Ghibli-style art with ChatGPT for free: Step-by-step guide

![How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide](https://images.hindustantimes.com/tech/img/2025/02/14/414x233/invites_1738728829564_1739543695649.png)

### How to create an invitation using iPhone’s new Apple Invites app- Step-by-step guide

![Apple TV app arrives on Android phones and tablets: What you get and how to install it](https://images.hindustantimes.com/tech/img/2025/02/13/414x233/unnamed_1739426557335_1739426567634.jpg)

### Apple TV app arrives on Android phones and tablets: What you get and how to install it

![Vodafone Idea OTT plans](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Vodafone Idea users can now stream 17 OTT apps with one subscription: Here's how

![Android data transfer methods](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### How to transfer data from one Android to another using Google backup, USB-C cable, and more

## Editor’s Pick

![iPhone 16e launched with A18 chip, Apple AI—bringing flagship power on a budget: Check specs, price](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 16e launched in India: All details about the new budget mobile from Apple

![DeepSeek was founded in China with only a fraction of the budget of the top AI companies in the US.](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### DeepSeek AI: How it works, who’s behind it, how it’s different from ChatGPT, and its big US market impact explained

![iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iPhone 17 Air likely to get this feature that iPhone 17 Pro models may miss out on

![Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Google Whisk AI explained: How remixing works, availability, and how it differs from Gemini

![iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### iOS 18.4 beta arriving soon: Know why it is the biggest iPhone update

## Trending Stories

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Infinix Note 50s 5G+](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Apple Intelligence AI training](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![CMF Buds 2](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

keep up with tech

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

![Twitter](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-twitter.png)

![WhatsApp](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-whatsApp.png)

![Facebook](https://images.hindustantimes.com/tech/static/revamp/images/png/tech-facebook.png)

## Gaming

![Check out these five gaming monitors under  <span class='webrupee'>₹</span>20,000,](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Top 5 gaming monitors under ₹20000 you should consider

![gaming consoles](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Grab gaming consoles at discounted rates during Amazon Great Indian Festival: Up to 72% off

![Pokémon GO Wild Area 2025](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Pokémon GO Wild Area 2025 to bring Grimmsnarl family, Shiny Hatenna, and global challenges

![Shade Silver](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Shade Silver free on Steam for a limited time: Here’s how to get it

![Call of duty](https://images.hindustantimes.com/tech/static/revamp/images/png/ht-tech-bg-img-90-66.png)

### Call of Duty: Black Ops 7 skips Switch 2 at launch, release date and price leak

![View all](https://images.hindustantimes.com/tech/static/revamp/images/png/view-all-icon.png)

## Trending News

### Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order

![Airtel 5G SIM card will now be delivered in 10 minutes with Blinkit- How to order](https://images.livemint.com/static/static/1x1_img.gif)

### Infinix Note 50s 5G+ set to launch in India with 64MP camera and MediaTek Dimensity 7300 SoC

![Infinix Note 50s 5G+](https://images.livemint.com/static/static/1x1_img.gif)

### Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more

![Xiaomi X Pro QLED Series sale starts in India: Check price, availability, and more](https://images.livemint.com/static/static/1x1_img.gif)

### Apple plans to train AI using your on-device data without accessing personal content or emails: Report

![Apple Intelligence AI training](https://images.livemint.com/static/static/1x1_img.gif)

### CMF Buds 2 key features and price revealed ahead of April 28 launch: Details inside

![CMF Buds 2](https://images.livemint.com/static/static/1x1_img.gif)

## Trending Gadgets

Mobiles

Laptops

Tablets

![HT Tech](https://images.hindustantimes.com/tech/static/revamp/images/png/HT_tech-new.gif)

- https://tech.hindustantimes.com/tech/news/microsoft-hack-shows-how-to-lose-and-win-the-cyberwar-71615309391287.html