Microsoft says it knew of hacker all along


Associated Press

SEATTLE — A hacker had high-level access to Microsoft Corp.’s computer system for 12 days — not up to five weeks, as the company had first reported — and was monitored the entire time.

While the company says it believes no major corporate secrets were stolen, some security experts believe the 12-day period was plenty of time for a hacker to do damage that may not have been detected yet.

Microsoft spokesman Rick Miller said Sunday that beginning Oct. 14 a hacker gained access to high-level secrets and that at some point over the next 12 days viewed blueprints, or source code, for Microsoft software that is being developed.

When it confirmed the incident Friday, the software giant based in Redmond, a Seattle suburb, said an electronic intruder had access to source code for as long as five weeks. Microsoft used that time estimate because the duration of the hacker’s presence was unclear and the company wanted to be sure it did not underestimate the problem, Miller said.

The company was alerted to the break-in by the creation of new accounts giving users access to parts of Microsoft’s computer network, Miller said.

"We start seeing these new accounts being created, but that could be an anomaly of the system," Miller said. "After a day or two, we realized it was someone hacking into the system."

It was not until Oct. 26, however, that the company notified federal law enforcement, which is investigating the matter. Microsoft said it initially planned to handle the break-in on its own.

"We realized the intrusion had grown to the level that warranted bringing in the FBI," Miller said. Miller said the activity did not corrupt or modify the code for the product, which he declined to identify.

If any attempts to download or transfer the source code were made, such activity was not recorded in Microsoft’s logs, Miller said, adding that it is extremely unlikely any source code files were copied because of their immense size.

But some security experts questioned that assessment.

"It’s impossible to say with absolute certainty that (source code) file has not been copied," according to Simon Perry, vice president of security solutions at Computer Associates International in Islandia, N.Y. "Over a 12-day period, it would be absolutely possible to take a copy of that."

Ray Pompon of Seattle-based Conjungi Networks, which installed some security tools for Microsoft in 1994, agreed, saying, "Source code files can be very big, but they’re easily compressible."

Microsoft has refused to say at what point it learned the hacker saw the source codes. Pompon said whether the company discovered it immediately would depend on what type of monitoring it was doing — something the company has not disclosed.

Miller acknowledged the hacker could have been in the system for longer than 12 days, but he said the company is confident that high-level access occurred only between Oct. 14 and Oct. 25.

But even with low-level access, the hacker could have accessed corporate e-mails and other confidential information, Miller said.

Microsoft has refused to identify what program the source code was for, except to say it was a product years from release — not Windows or Office software.

Pompon said it’s less damaging to Microsoft that the product was not one already on the market. "Microsoft can be more careful about what they’re going to release and make sure it’s not vulnerable," he said.

Microsoft’s source codes are the most coveted in the multibillion-dollar industry.

With access to software blueprints, competitors could write programs that undermine Microsoft or use the data to identify weaknesses, making computer break-ins and virus-writing easier.

Copyright ©2000 Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.

Talk to us

More in Local News

Funko mascots Freddy Funko roll past on a conveyor belt in the Pop! Factory of the company's new flagship store on Aug. 18, 2017.  (Dan Bates / The Herald)
Lawsuit: Funko misled investors about Arizona move

A shareholder claims Funko’s decision to relocate its distribution center from Everett to Arizona was “disastrous.”

1 stabbed at apartment in Lynnwood

The man, 26, was taken to an Everett hospital with “serious injuries.”

A firefighting helicopter carries a bucket of water from a nearby river to the Bolt Creek Fire on Saturday, Sep. 10, 2022, on U.S. Highway 2 near Index, Washington. (Ryan Berry / The Herald)
Red flag fire warning issued west of Cascades

There are “critical fire weather” conditions due to humidity and wind in the Cascades, according to the National Weather Service.

A house fire damaged two homes around 1:30 a.m. Tuesday, June 6, 2023 in Marysville, Washington. (Photo provided by Marysville Fire District)
Fire burns 2 homes in Marysville, killing 2 dogs

Firefighters responded to a report of a fire north of Lakewood Crossing early Tuesday, finding two houses engulfed in flames.

Logo for news use featuring the municipality of Mountlake Terrace in Snohomish County, Washington. 220118
Mountlake Terrace eyes one-time projects for $2.4M in federal funds

Staff recommended $750,000 for a new roof and HVAC at the library, $250,000 toward a nonprofit facility in Lynnwood and more.

The Snohomish River turns along the edge of the Bob Heirman Wildlife Preserve at Thomas’ Eddy on Wednesday, May 3, 2023 in Snohomish, Washington. (Olivia Vanni / The Herald)
To build a healthier Snohomish River, more log jams

About $2.8M in grants will help engineer log jams, tear down levees and promote salmon restoration at Bob Heirman Wildlife Preserve.

Dave "Bronco" Erickson stands next to the pink-and-purple 1991 Subaru Justy hatchback “Pork Chop Express” car that he is seeking to re-home for $500. The car has been on Whidbey Island for years, mainly as yard art. (Andrea Brown / The Herald)
For sale: Whidbey’s fabled ‘Pork Chop Express’ gets great smileage

Asking price is $500 for the 1991 Subaru Justy, a three-cylinder econobox with 65K miles and a transmission as rare as hen’s teeth.

Ciscoe Morris, a longtime horticulturist and gardening expert, will speak at Sorticulture. (Photo provided by Sorticulture)
Get your Sorticulture on: Garden festival returns to downtown Everett

It’s a chance to shop, dance, get gardening tips, throw an axe and look through a big kaleidoscope. Admission is free.

Marysville resident sentenced to 15 years for fentanyl operation

Jose Eduardo Garnica received a shipment from China labeled “Furniture Parts.” It had fentanyl-manufacturing parts.

Most Read