Archive · 23 Jul 2025
Microsoft: Chinese Hackers Exploited SharePoint Flaws
Imagine SharePoint is like a lockbox where companies and governments store important documents.
Some sneaky hackers from China found ways to pick the lock, getting into the lockbox and stealing secrets.
These hackers are supported by the Chinese government.
Even though the lockbox makers tried to fix the problem, the hackers found new ways to break in.
The lockbox makers are still investigating what happened, and they want everyone to know that this is a big deal.
The Chinese government says they didn't do anything wrong and want proof before being accused.
Microsoft says Chinese hackers exploited SharePoint flaws to target businesses and government agencies.
Multiple hacking groups, including those supported by the Chinese government, leveraged the vulnerabilities.
Hackers have used the flaws to access government systems in the US and Europe, stealing sign-in credentials.
Microsoft released patches, but hackers found ways to bypass them, continuing the intrusions.
The Chinese Embassy denies the allegations and opposes cyberattacks, urging evidence-based conclusions.
- Who
- Multiple Chinese hacking groups, including Linen Typhoon, Violet Typhoon, and Storm-2603, as well as other unidentified actors.
- What
- Chinese hackers exploited flaws in Microsoft's SharePoint software to access systems and steal data.
- When
- Attacks have been ongoing since at least July 7, with Microsoft releasing patches, but hackers found ways around them.
- Where
- Targets include government agencies, businesses, and educational institutions in the US, Europe, the Middle East, and Southeast Asia.
- Why
- The motive appears to be espionage, stealing sign-in credentials, and gaining access to sensitive information.
Microsoft's Assertion
China's Response
Accusation vs. Denial
Microsoft's Assertion
Microsoft has accused Chinese state-sponsored hackers of exploiting SharePoint flaws.
China's Response
The Chinese Embassy denies these allegations and urges evidence-based conclusions.
- Software Affected
- Microsoft SharePoint
- Attackers
- Chinese state-sponsored hacking groups
- Targets
- Businesses, government agencies
- Vulnerabilities Exploited
- SharePoint flaws
- Credential Type Stolen
- Usernames, passwords, tokens
- Patches Released
- Yes, but hackers bypassed them