This Thursday, Microsoft’s cloud providers had been targets of a Distributed Denial of Service (DDoS) assault, which managed to deliver OneDrive down for some customers.
As experiences began coming in of customers being unable to open their OneDrives and getting the “This web page isn’t working proper now” message, a risk actor going by “Nameless Sudan” took accountability for the assault.
Microsoft acknowledged the assault rapidly and deployed mitigation measures. It mentioned on its service well being standing web page:
“We’re investigating a possible difficulty and checking for influence to your group. We’ll present an replace inside half-hour,” the corporate mentioned. “We’re reviewing OneDrive telemetry that captures this influence state of affairs to find out the supply of the service entry failures and start figuring out a mitigation plan.”
Russian and Iranian risk actors
Whereas Nameless Sudan’s motives are unknown, the risk actor appears to be linked to Russia, BleepingComputer experiences. The identical risk actor was engaged in “anti-Israel exercise” on Jerusalem Day, Israel’s 780th Navy Intelligence Brigade tweeted final month, arguing that the group may very well be affiliated with Iran, as effectively.
Nameless Sudan actor appears to have focused different Microsoft providers with DDoS assaults earlier this week, as effectively.
“Microsoft, you suppose we forgot you? We’re motivated to show you liars an excellent lesson in honesty that none of your dad and mom ever taught you,” Nameless Sudan allegedly mentioned on Telegram. “Onedrive has been downed. Let’s have a look at your new excuse now.”
Beforehand, the hackers focused Outlook, SharePoint On-line, and OneDrive for Enterprise, it was mentioned.
Within the meantime, Microsoft mitigated the assaults and confirmed that simply onedrive.dwell.com was affected.
“The impacted browser URL is onedrive.dwell.com. Entry to the OneDrive service utilizing the desktop shopper, a synchronization shopper or Workplace shoppers will not be impacted,” Microsoft mentioned. “We’re persevering with to research monitoring telemetry and performing load-balancing processes to supply reduction.”
Through: BleepingComputer