FOLLOW US

Microsoft Corp. has taken decisive legal action against foreign-based cybercriminals accused of exploiting its artificial intelligence services for malicious purposes. A Virginia federal judge authorized Microsoft to seize a website allegedly central to the scheme, according to court filings unsealed Friday.

Cybercriminals Allegedly Circumvented AI Safety Measures

In a lawsuit filed last month, Microsoft alleged that an unidentified group of cybercriminals used stolen customer credentials and a custom tool to bypass authentication systems and safety guardrails protecting its Azure OpenAI Service. The group reportedly used the compromised services to generate harmful content and resold access to other bad actors.

Microsoft claimed the defendants’ actions violated multiple laws, including the Computer Fraud and Abuse Act, the Digital Millennium Copyright Act, and the Racketeer Influenced and Corrupt Organizations Act (RICO).

Court Grants Emergency Action

On Dec. 19, U.S. District Judge Michael S. Nachmanoff granted Microsoft a temporary restraining order, enabling the company to:

• Take control of the domain "aitism.net", allegedly used to execute the scheme.
• Issue subpoenas to third-party providers whose infrastructure had been misused.
• Prevent the defendants from further violations while the case proceeds.

When the defendants failed to appear at a court hearing Friday or respond to the court’s directive, Judge Nachmanoff converted the restraining order into a preliminary injunction, keeping the website under Microsoft’s control pending the case’s resolution.

The judge noted that "immediate and irreparable harm" would likely result if the defendants were not restrained.

Microsoft’s Stance on Cybersecurity

In a blog post Friday, Microsoft’s Digital Crimes Unit reaffirmed its commitment to protecting AI technologies from abuse. The company emphasized that taking control of the domain would help it gather evidence about the operation, disrupt additional infrastructure, and strengthen its security measures.

“With this action, we are sending a clear message: the weaponization of our AI technology by online actors will not be tolerated,” wrote Steven Masada, assistant general counsel at Microsoft.

The post highlighted Microsoft’s broader efforts to enhance security across its platforms and to collaborate with global partners to safeguard AI systems.

Legal Representation and Ongoing Investigation

Microsoft is represented by attorneys from Orrick Herrington & Sutcliffe LLP, including Joshua Carrigan and Robert Uriarte, along with its in-house counsel Richard Boscovich and Steven Masada. Information about counsel for the defendants was unavailable.

This legal battle underscores the growing risks associated with AI exploitation and the challenges of combating sophisticated cyber threats. Microsoft’s proactive measures aim to safeguard its platforms while setting a precedent for addressing AI-related abuse.