Microsoft confirms Chinese cyber groups behind major SharePoint exploit; US agencies and global companies among affected

Three China-linked cyber espionage groups have been implicated in a major hacking campaign that has compromised a wide range of organisations globally, including multiple US government agencies. The cyberattack, which exploits critical vulnerabilities in Microsoft’s widely used SharePoint server software, has prompted urgent investigations by federal officials and private security experts, according to a report by Politico.

Microsoft confirmed in a recent blog post that the three threat actors, identified as Violet Typhoon, Linen Typhoon, and Storm-2603, are actively involved in the campaign.