Microsoft confirmed that the threat actor obtained a Microsoft account consumer signing key and used it to forge tokens and gain unauthorized access to user email accounts. The Chinese government has denied any involvement in the attack and accused the United States of being the “world’s biggest hacking empire and global cyber thief.”
