{"product_id":"midnight-blizzard-shirt-apt29-password-spray-graphic-tee-unhacked","title":"EXHIBIT 0007 — MIDNIGHT BLIZZARD","description":"\u003cp\u003eThere was no zero-day. There was a test account.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eIn November 2023, Midnight Blizzard — the Russian SVR actor also tracked as APT29 and Cozy Bear — ran a password spray against a legacy, non-production test tenant at Microsoft. Low volume, spread across residential proxy infrastructure, slow enough to stay under the alerting thresholds.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eOne account answered. It had no multi-factor authentication on it.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThat account held permissions on an OAuth application with elevated access to the corporate environment. From there the path was ordinary: create more OAuth applications, create a new user to consent to them, grant \u003cem\u003efull_access_as_app\u003c\/em\u003e to Office 365 Exchange Online, and read mail.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThey went for senior leadership, and then for the cybersecurity and legal teams — the people who would be writing about them.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eIt is filed as a sophisticated nation-state intrusion, and the tradecraft after the first hour genuinely was. The first hour was a guessed password on an account nobody owned, in a tenant nobody had decommissioned, protected by nothing.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEvery organisation has that tenant. Microsoft disclosed theirs on 19 January 2024.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0007 \/ MIDNIGHT BLIZZARD \/ 2024\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54505691873564,"sku":"13423940038902315088","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54505691906332,"sku":"75837493969354619910","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54505691939100,"sku":"88679867265320878281","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54505691971868,"sku":"49145158082344739956","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54505692004636,"sku":"24970894589493511601","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54505692037404,"sku":"33283892967768701974","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54505692070172,"sku":"27933578559161500085","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54505692102940,"sku":"32084402491838946785","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54505692135708,"sku":"21944402446837891580","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54505692168476,"sku":"19498633644346158482","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54505692201244,"sku":"28745863857739054215","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54505692234012,"sku":"35615388700490923681","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54505692266780,"sku":"39638878801514869991","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54505692299548,"sku":"25165907788912955128","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54505692332316,"sku":"71277999851566390810","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54505692365084,"sku":"26115981480610993160","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54505692397852,"sku":"46043798384405091100","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54505692430620,"sku":"26973544299992138464","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54505692463388,"sku":"83983765495977218187","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54505692496156,"sku":"31208185295607289616","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54505692528924,"sku":"17574642744970503828","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54505692561692,"sku":"86234636911544458377","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54505692594460,"sku":"16204425625975666353","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54505692627228,"sku":"14049561185097578481","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54505692659996,"sku":"20773757584988972032","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54505692692764,"sku":"20903536045076327198","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54505692725532,"sku":"16528998629254541717","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54505692758300,"sku":"33189057214494358986","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54505692791068,"sku":"44052864560738581674","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54505692823836,"sku":"66915122184243111434","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/5218335794085026071_2048.jpg?v=1788370847","url":"https:\/\/unhacked.shop\/products\/midnight-blizzard-shirt-apt29-password-spray-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}