Threat actor Medusa boasts of spreading Microsoft’s Bing source code
The Medusa ransomware team shares what it claims to be leaked source code for two of Microsoft’s Bing products: Bing Maps and Cortana.
The publication, from Medusa’s own website and shared on Twitter by Emisoft’s Brett Callow, states that the data totals 12 gigabytes.
“I can only say that this leak is of most interest to programmers, as it contains the source codes for the following products Bing, Bing Maps and Cortana,” said the post, from a Medusa member known as Robert.
“There are many digital signatures of Microsoft products in the leak. Many of them have not been removed from the market,” the publication continues. “Continue and your software will have the same level of trust as the original Microsoft product. Tell me about your successes.”
However, Callow believes the leak may not be a new incident.
“The leak is ~12GB and likely part of the ~37GB leaked by Lapsus in 2022,” Callow said in his post.
The Lapsus$ hack occurred in March 2022, when the hacking group claimed to have stolen 32GB of data from an internal Microsoft Azure DevOps server. The group posted a screenshot at the time of the large amount of data they claim to have leaked, including the source code for a variety of Bing-related products, including Bing Maps and Cortana.
At the time of publication, Lapsus$ claimed to have 90 percent of Bing’s source code and 45 percent of Cortana’s. The leak also contained a series of internal documents and emails.
At the time, Microsoft downplayed the leak.
“Our investigation found that a single account had been compromised, granting limited access. “Our cybersecurity response teams quickly engaged in remediating the compromised account and preventing further activity,” Microsoft said. in a blog post detailing the incident.
“Microsoft does not rely on code secrecy as a security measure, and viewing the source code does not increase the risk.”
Medusa is believed to be behind a ransomware attack against Tonga Communications Corporation last year, causing widespread disruption in the Pacific island nation.
