Microsoft has accused Chinese state-sponsored groups of exploiting its SharePoint document management software to target users including large corporations and government agencies.
The US software giant said on Tuesday that two groups — Linen Typhoon and Violet Typhoon — had exploited a so-called spoofing vulnerability to attack servers used by Microsoft customers. Another China-based group, Storm-2603, was also found to have exploited these vulnerabilities.
Microsoft said these so-called “zero day” vulnerabilities affected customers operating their own on-premise servers and did not affect those who used its cloud-based service. It added that it had since released “new comprehensive security updates”.