It is events such as these that would end up as an embarrassment to Microsoft, and the question remains as to how the SEA were able to gain access – perhaps through obtaining the passwords to gain access via phishing attacks that were previously confirmed by Microsoft. Needless to say, one would be wont to ask whether the SEA group has gained access to other properties from Microsoft. Chances are Microsoft would have taken the steps required to ensure that machines involved in the phishing attack would be scrubbed clean.
We do wonder just how will Microsoft beef up the security around their other blogs and websites so that such an embarrassment would not happen again in the future.