Comment

Comment by throwaway4good

And from Microsoft / GitHub - who would have a lot additional information (logs, ip-adresses, use of two-factor auth etc.)? Have they made a statement?

Usually Microsoft etc. don't hold back identifying "threat actors".

Is there a US police investigation ongoing that could ask Microsoft? The target of this attack has been US firms / persons so if they report it, I assume a US police investigation would be required.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton