Microsoft says group behind SolarWinds hack now targeting government agencies

The full version of the article, along with thousands like it, can be found on the following page: Microsoft says group behind SolarWinds hack now targeting government agencies

The group behind the SolarWinds cyber attack identified late last year is now targeting government agencies, think tanks, consultants, and non-governmental organizations, Microsoft Corp has said.

"This week we observed cyberattacks by the threat actor Nobelium targeting government agencies, think tanks, consultants, and non-governmental organizations", Microsoft said in a new blog entry.

Nobelium, originating from Russia, is the same actor behind the attacks on SolarWinds customers in 2020, according to Microsoft.

"This wave of attacks targeted approximately 3,000 email accounts at more than 150 different organizations", Microsoft said.

While organisations in the US received the largest share of attacks, targeted victims came from at least 24 countries, Microsoft said.

At least a quarter of the targeted organisations were involved in international development, humanitarian issues and human rights work, Microsoft said in the blog.

Nobelium launched this week's attacks by breaking into an email marketing account used by the United States Agency For International Development (USAID) and from there launching phishing attacks on many other organisations, Microsoft said.

The hack of information technology company SolarWinds, which was identified in December, gave access to thousands of companies and government offices that used its products. Microsoft President Brad Smith described the attack as "the largest and most sophisticated attack the world has ever seen".

This month, Russia's spy chief denied responsibility for the SolarWinds cyber attack but said he was "flattered" by the accusations from the United States and UK that Russian foreign intelligence was behind such a sophisticated hack.

The US and UK have blamed Russia's Foreign Intelligence Service (SVR), successor to the foreign spying operations of the KGB, for the hack which compromised nine US federal agencies and hundreds of private sector companies.

The attacks disclosed by Microsoft on Thursday appeared to be a continuation of multiple efforts to target government agencies involved in foreign policy as part of intelligence gathering efforts, Microsoft said.

The company said it was in the process of notifying all of its targeted customers and had "no reason to believe" these attacks involved any exploitation or vulnerability in Microsoft's products or services.

The team at Platform Executive hope you have enjoyed this article. Automatic translation from English to a growing list of languages via Google AI Cloud Translation. Initial reporting via our official content partners at Thomson Reuters. Reporting by Kanishka Singh and Sabahatjahan Contractor in Bengaluru. Editing by Robert Birsel.

You can stay on top of all the latest developments across the platform economy, find solutions to your key challenges and gain access to our problem-solving toolkit and proprietary databases by becoming a member of our growing community. For a limited time, our subscription plans start from just $7 per month.

 

This news article was published by Platform Executive, the home of the platform economy.

If you enjoy the content then please post a link on your website, or share on social media to help us get the word out.

Microsoft says group behind SolarWinds hack now targeting government agencies posted first on https://www.platformexecutive.com/