Microsoft confirmed that it is investigating claims that its GitHub account has been hacked after some of its files were leaked online.

Microsoft launched an investigation into the claims that its GitHub account has been hacked.

Recently some files allegedly stolen from the Microsoft Github account have been leaked online, and they appear to be legitimate.

The data leak was first reports on May 6 by experts at the data breach monitoring Under the Breach, a hacker claimed to have obtained 500 GB of source code from Microsoft’s private GitHub repositories.

The guy behind the hack is the same that recently leaked 15 million records stolen from Indonesian e-commerce giant Tokopedia.

Under the Breach analyzed the data and determined that the files were likely legitimate. 

HUGE: The person behind the recent Tokopedia hack claiming he has 500GB (uncompressed) worth of private Microsoft source code, containing mostly Azure Source code, as well as Office and some windows runtime files / APIs.Appears to be stolen from private Github repositories. pic.twitter.com/wKUOi0nDkk— Under the Breach (@underthebreach) May 6, 2020The dump includes source code for Azure, Office, and some Windows runtime files and APIs. Under the Breach, who verified the dump, said that it did not appear to include anything sensitive data, anyway it could hold keys and passwords left by mistake in the code.

After some research and because the actor dumped the entire dirlist of the private repositories, it appears this is real. I doubt there is anything too private in these repositories but companies do sometime leave keys/passwords on Github by mistake. pic.twitter.com/4L8s18hQA0— Under the Breach (@underthebreach) May 6, 2020According to the image shared by hacker, the data are dated March 28, 2020.

Update: 500GB dump is real. Dump of Microsoft GitHub repositories as of ~03/28/2020. Yikes.— Rafael Rivera (@WithinRafael) May 7, 2020According to a post published on a hacker forum, the hacker is offering a 54 GB compressed archive (500 GB uncompressed).

Please vote Security Affairs for European Cybersecurity Blogger Awards – VOTE FOR YOUR WINNERShttps://docs.google.com/forms/d/e/1FAIpQLSe8AkYMfAAwJ4JZzYRm8GfsJCDON8q83C9_wu5u10sNAt_CcA/viewform

window._mNHandle = window._mNHandle || {};
window._mNHandle.queue = window._mNHandle.queue || [];
medianet_versionId = “3121199”;

try {
window._mNHandle.queue.push(function () {
window._mNDetails.loadTag(“762221962”, “300×250”, “762221962”);
});
}
catch (error) {}

Pierluigi Paganini

(SecurityAffairs – GitHub, hacking)

The post Microsoft investigates claims that its GitHub account has been hacked appeared first on Security Affairs.