Microsoft Overwhelmed By Massive DDoS

Posted on Wednesday, Jun 21, 2023 by Ned Bellavance

Featured in this episode of Chaos Lever

It has not been a great week for cloud providers, and Microsoft was no exception. The cloud giant is attributing issues with Azure, Outlook, and OneDrive to a massive DDoS attack on their infrastructure.

The attack targeted Layer 7 of the networking stack, using common exploits like HTTPS floods, Cache Bypasses, and Slowloris- which is just the most adorable name for an attack and I love it.

Microsoft has not released additional details regarding the size of the attack, aside from saying it was a combination of virtual private servers, open proxies, and other DDoS tools. They have named the group behind the attack Storm-1359 for tracking purposes, but since the attack the hacking group Anonymous Sudan has claimed responsibility.

Anonymous Sudan has also been behind attacks targeting Swedish, Dutch, and German organizations in the past year. Microsoft has stated that no data was lost or compromised and services have been restored and further fortified against future attacks.