Microsoft
Solarwinds hackers target tech companies
The hackers behind the serious cyberattack on IT service provider Solarwinds are now targeting dozens of companies in the tech industry, according to Microsoft's findings.
Since May, around 140 technology service providers alone have been informed of attacks, Microsoft's security researchers announced on Monday. The hackers were successful in up to one in ten of them.
Using IT maintenance software from the company Solarwinds, the attackers presumably gained access to the computer networks of US government agencies, including the Department of Finance and the Department of Energy, for espionage purposes. The attack was discovered at the end of last year. The exact extent of the information obtained has not yet been made public. The US government and IT security researchers suspect that hackers with links to the Russian foreign intelligence service were behind the attack. Moscow has always rejected the accusations.
Microsoft calls the hacker group 'Nobelium'. Recently, it has focused on companies that set up and manage cloud services for other companies. The Microsoft experts explained that they presumably hoped to gain access to their customers' computer systems via the service providers' access points.
Online criminals had already been successful with such an attack method in the summer. Using a vulnerability at IT service provider Kaseya, they were able to encrypt customers' computers and demand a ransom.
Systematic access to technology supply chains
In total, Microsoft has informed 609 customers of almost 23,000 attacks by 'Nobelium' since July 1, the report continued. The success rate of the attacks is in the low single-digit percentage range. "The recent activity is further evidence that Russia is attempting to gain long-term, systematic access to technology supply chains - and to create a mechanism to monitor targets of interest to the Russian government now or in the future," the Microsoft experts wrote.













