Outlook, OneDrive outages caused by DDoS attack, Microsoft says

From PC World: Microsoft has confirmed that the service outages for Outlook, OneDrive, and other Microsoft 365 services on June 5 were caused by a malicious attack. Hackers flooded Microsoft’s servers with denial-of-service (DDoS) attacks and brought them to their overload limit. The traffic sent to the servers increased so massively due to the DDOS attacks that they could no longer process the requests, bringing Microsoft’s services to their knees.

This meant Microsoft customers could no longer retrieve or write new emails in Outlook. Communication via Teams was also disrupted and calendars no longer synchronized. The OneDrive web portal went down and various Azure services were no longer available.

Microsoft writes:

“Beginning in early June 2023, Microsoft identified surges in traffic against some services that temporarily impacted availability. Microsoft promptly opened an investigation and subsequently began tracking ongoing DDoS activity by the threat actor that Microsoft tracks as Storm-1359.

These attacks likely rely on access to multiple virtual private servers (VPS) in conjunction with rented cloud infrastructure, open proxies, and DDoS tools.”

View: Full Article