Microsoft said on Friday that the hackers behind the notorious SolarWinds cyberattack have launched a fresh campaign mostly focusing on U.S. interests that, while mostly unsuccessful, managed to compromise three entities.
Article by Tom Ozimek from our partners at The Epoch Times.
The Russia-based hacking group, which goes by various names including Nobelium, launched the new campaign using “password spray and brute-force attacks,” the Microsoft Security Response Center said in an alert, noting that 36 countries in total had been targeted.
The bulk of the attacks—45 percent—targeted entities within the United States, followed by 10 percent in the UK, and smaller numbers in Germany and Canada. The activity targeted specific customers, Microsoft said, mostly IT companies (57 percent), government agencies (20 percent), followed by smaller percentages for non-governmental organizations, think tanks, and financial services.
“This recent activity was mostly unsuccessful, and the majority of targets were not successfully compromised—we are aware of three compromised entities to date,” Microsoft said. The company did not specify the entities that were breached or targeted, but said it was contacting all those affected by the cyberattack.
As part of its probe into the new campaign, Microsoft detected information-stealing malware on a computer belonging to one of its customer support agents who had access to account information for a “small number” of customers.
The threat actor, which Microsoft identified as Nobelium, “used this information in some cases to launch highly-targeted attacks as part of their broader campaign.” Microsoft said it “responded quickly, removed the access, and secured the device.”
A Microsoft spokesman told Reuters that the latest breach by the threat actor was not part of Nobelium’s previous successful attack on Microsoft, in which the group obtained some source code.
In the SolarWinds attack, which has been attributed to Nobelium, the group altered code to access SolarWinds customers, including nine U.S. federal agencies.
Microsoft later said that the group had compromised its own employee accounts and taken software instructions governing how Microsoft verifies user identities.
U.S. authorities have linked Nobelium to Russia’s Foreign Intelligence Service, allegations Moscow denies.
A spokesperson for the Department of Homeland Security, which oversees the U.S. Cybersecurity and Infrastructure Security Agency, told The Wall Street Journal that the agency is “aware of this activity and is working with Microsoft and our interagency partners to evaluate the impact.” He declined to say whether any government agencies had been affected by the new attack.
Reuters contributed to this report.
New Conservative Network Seeks Crowdfunding Help
They say we have to go big or go home. We’re trying to go big and bring the patriotic truth the the nation, but we need help.
Readers may or may not realize that over the past year, we’ve been bringing more conservative news and opinion outlets under our wing. Don’t take our expansion as a sign of riches; all of the “acquisitions” have been through sweat and promises of greater things to come for all involved. As a result, we’ve been able to bring together several independent media sites under a unified vision of preventing America from succumbing to the progressive, “woke,” Neo-Marxist ideologies that are spreading like wildfire across America.
The slow and steady reopening of America is revealing there was a lot more economic hardship brought about from the Covd-19 lockdowns than most realize. While we continue to hope advertising dollars on the sites go up, it’s simply not enough to do things the right way. We are currently experiencing a gap between revenue and expenses that cannot be overcome by click-ads and MyPillow promos alone (promo code “NOQ” by the way).
To overcome our revenue gap and keep these sites running, our needs fluctuate between $3000-$7000 per month. In other words, we’re in the red and hemorrhaging.
The best way you can help us grow and continue to bring the truth to the people is by donating. We appreciate everything, whether a dollar or $10,000. Anything brings us closer to a point of stability when we can hire writers, editors, and support staff to make the America First message louder. Our Giving Fuel page makes it easy to donate one-time or monthly. Alternatively, you can donate through PayPal as well.
As the world spirals towards radical progressivism, the need for truthful journalism has never been greater. But in these times, we need as many conservative media voices as possible. Please help keep NOQ Report and the other sites in the network going.
Thank you and God Bless,
All ORIGINAL content on this site is © 2021 NOQ Report. All REPUBLISHED content has received direct or implied permission for reproduction.
With that said, our content may be reproduced and distributed as long as it has a link to the original source and the author is credited prominently. We don’t mind you using our content as long as you help out by giving us credit with a prominent link. If you feel like giving us a tip for the content, we will not object!
JD Rucker – EIC