INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Microsoft Deploys Age-Aware APIs to Identify Users by Demographics

| 2026-09-09 01:16 CRITICAL HIGH
Executive Summary
AI-generated
On September 9, 2026, Microsoft added age-awareness APIs that can determine if users are children, teens, or adults. The affected countries include Singapore, Brazil, Australia, France, and at least one other country whose name is not specified in the source. These new APIs will be used to enhance parental controls during Windows setup in regions including France.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

ma•••@bl•••.•••
hxxp://••••••••••••••••••••
hxxp://••••••••••••••••••••
hxxp://••••••••••••••••••••
hxxp://••••••••••••••••••••
ad•••••.com
ww•••••.com
de•••••.com
ww•••••.com
10•••••.jpg
10•••••.jpg
10•••••.jpg
10•••••.png
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
NORTH_AMERICA NORTH_AMERICA
Incident Timeline
‎2016 August
Microsoft released August updates that triggered 0xc0000409 errors on Windows Server 2016.
infrastructure Windows
tactic T1584.004 - Server
infrastructure 2016 Windows Server
‎July 2026
Threat actors were not involved in this incident, Microsoft added age-awareness APIs to Windows Update.
infrastructure Windows
general_metric 11 Windows
organisation KB5124008 & KB5122880
organisation Windows Update
general_metric 35 changes
general_metric 42 changes
general_metric 570 massive flaws
general_metric 3 days
organisation BleepingComputer
organisation EU CRA
‎September 2026
Microsoft released September 2026 Patch Tuesday, which included fixes for 966 flaws and two zero-days.
general_metric 966 flaws
general_metric 2 days
‎September 8, 2026
Microsoft is increasing the visibility of parental controls during Windows setup in regions including France as part of its broader efforts to implement age-awareness APIs.
organisation ThreatLocker
general_metric 1 PM
infrastructure Windows
organisation Microsoft Age Verification
organisation MAV
organisation The Blue Report 2026
‎2003 - 2026
Microsoft added age-awareness APIs to its platforms, allowing them to determine if users are children, teens, or adults.
organisation Social & Feeds
‎2026/09/09
Threat actors used fake shops to steal credit cards through the DoppelCart fraud network.
infrastructure Windows
organisation Stack Protection
organisation Windows Registry
organisation the Windows Registry
organisation Windows Insiders
infrastructure Microsoft 365
organisation BigBear Microsoft 365
organisation MFA
victims 258 organizations
infrastructure Linux
organisation APM
organisation Hackers
organisation Microsoft
organisation Magento
organisation Adobe
threat_actor ShinyHunters
organisation DMV
organisation DoppelCart
organisation IP
organisation safely.jpg
organisation CTI
organisation Upcoming Webinar
organisation ClickFix
organisation Freestar.com
financial 2 hours
Tactical Metrics
Metrics
infrastructure
‎Windows
Affected Product
Metrics
infrastructure
‎Microsoft 365
Affected Product
Metrics
victims
258
Organizations
Metrics
infrastructure
2,016
Windows Server
Metrics
infrastructure
‎Linux
Affected Product
Metrics
financial
2
Hours
Intelligence Sources