Microsoft Says Group Behind SolarWinds Hack Now Targeting Government Agencies, NGOs

Nobelium, originating from Russia, is the same actor behind the attacks on SolarWinds customers in 2020.

By Reuters | Updated: 28 May 2021 09:54 IST

Microsoft Says Group Behind SolarWinds Hack Now Targeting Government Agencies, NGOs

The hack of information technology company SolarWinds was identified in December

Highlights

Nobelium originates from Russia
Organisations in the United States received the largest share of attacks
Microsoft said targeted victims came from at least 24 countries

The group behind the SolarWinds cyberattack identified late last year is now targeting government agencies, think tanks, consultants, and non-governmental organisations, Microsoft said late on Thursday.

"This week we observed cyberattacks by the threat actor Nobelium targeting government agencies, think tanks, consultants, and non-governmental organisations", Microsoft said in a blog.

Nobelium, originating from Russia, is the same actor behind the attacks on SolarWinds customers in 2020, according to Microsoft.

[Sponsored] Samsung Galaxy S24: The Ultimate Camera Phone With Smarter On-Device AI

"This wave of attacks targeted approximately 3,000 email accounts at more than 150 different organisations", Microsoft said.

While organisations in the United States received the largest share of attacks, targeted victims came from at least 24 countries, Microsoft said.

At least a quarter of the targeted organisations were involved in international development, humanitarian issues and human rights work, Microsoft said in the blog.

Microsoft Could Get $150 Million in US Cyber Spending Despite Recent Hacks

Nobelium launched this week's attacks by breaking into an email marketing account used by the United States Agency For International Development (USAID) and from there launching phishing attacks on many other organisations, Microsoft said.

The hack of information technology company SolarWinds, which was identified in December, gave access to thousands of companies and government offices that used its products. Microsoft President Brad Smith described the attack as "the largest and most sophisticated attack the world has ever seen".

This month, Russia's spy chief denied responsibility for the SolarWinds cyberattack but said he was "flattered" by the accusations from the United States and Britain that Russian foreign intelligence was behind such a sophisticated hack.

The United States and Britain have blamed Russia's Foreign Intelligence Service (SVR), successor to the foreign spying operations of the KGB, for the hack which compromised nine US federal agencies and hundreds of private sector companies.

The attacks disclosed by Microsoft on Thursday appeared to be a continuation of multiple efforts to target government agencies involved in foreign policy as part of intelligence gathering efforts, Microsoft said.

The company said it was in the process of notifying all of its targeted customers and had "no reason to believe" these attacks involved any exploitation or vulnerability in Microsoft's products or services.

It's Google I/O time this week on Orbital, the Gadgets 360 podcast, as we discuss Android 12, Wear OS, and more. Later (starting at 27:29), we jump over to Army of the Dead, Zack Snyder's Netflix zombie heist movie. Orbital is available on Apple Podcasts, Google Podcasts, Spotify, Amazon Music and wherever you get your podcasts.

Affiliate links may be automatically generated - see our ethics statement for details.

Comments

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.