Motive: Cyber-war against US
In an update to the Azure status page, Microsoft has disclosed the initial cause behind the worldwide outage that affected the Azure Portal on Friday. The company attributed the disruption to a significant increase in network traffic, which it described as a “spike.”
On Friday afternoon, customers attempting to access the Azure Portal at portal.azure.com encountered connection problems and received a notification stating, “Our services aren’t available right now. We’re working to restore all services as soon as possible. Please check back soon.“
According to Microsoft’s update on the Azure status page, the connectivity issues extended to other Microsoft websites, including the Entra Admin center at entra.microsoft.com and Intune at intune.microsoft.com.
Microsoft acknowledged the network traffic surge as the preliminary root cause for the incident. The company employed various measures to address the issue, including load balancing processes and existing auto-recovery operations, aimed at mitigating the impact on customers’ ability to access the affected sites. Furthermore, Microsoft stated that it continues to monitor the health of the platform.
Further details regarding the incident may be revealed as Microsoft conducts a thorough investigation into the outage.
Anonymous Sudan sent a message through TG-
Anonymous Sudan claimed to have conducted a DDoS attack which correlates with the “spike” in network traffic seen by Microsoft.
The same hacktivist group has previously claimed to be targeting U.S. companies to protest United States’ interference in Sudanese internal affairs.
Last week, Anonymous Sudan also claimed other DDoS attacks on Microsoft web portals for Outlook.com and OneDrive, which were also hit by outages.
Take away : It was a cyber attack on United States- Anonymous Sudan
References: Internet, Darknet, Telegram