Microsoft Warns Against Russian Hackers

The hacking group infamous for the SolarWinds hack is targeting the tech supply chain.
Lauren MuskettOctober 25, 2021

Microsoft admitted the Russian nation-state actor Nobelium, the hacking group infamous for the SolarWinds hack, has engaged in jeopardizing global networks by targeting the tech supply chain, including resellers and providers of cloud technology.

Microsoft informed over 140 technology service providers and resellers that Nobelium targeted them and believes the hackers have compromised 14 of them. The attackers weren’t attempting to exploit any flaws or vulnerabilities in software but instead using “well-known” techniques to steal credentials.

Drive Business Strategy and Growth

Drive Business Strategy and Growth

Learn how NetSuite Financial Management allows you to quickly and easily model what-if scenarios and generate reports.

Microsoft attributes the coordinated attack, first observed in May, to Nobelium. They used sophisticated intrusion techniques in 2020 to infect with malware of up to 18,000 customers of SolarWinds, Bloomberg reports.

Nobelium was responsible for an attack on IT companies, governments, think tanks, and financial service entities earlier this year that spanned 36 countries.

The Kremlin repeatedly denied responsibility for any hacking attacks. 

This time, between July and October this year, “we informed 609 customers that they had been attacked 22,868 times by Nobelium, with a success rate in the low single digits,” Microsoft vice president Tom Burt said. “This recent activity is another indicator that Russia is trying to gain long-term, systematic access to a variety of points in the technology supply chain.” 

Price Action: Microsoft shares traded lower by 0.50% at $307.62 on the last check Monday.

This story originally appeared on Benzinga. © 2021

Benzinga does not provide investment advice. All rights reserved.

Lisa Maree Williams via Getty Images