Thursday, June 30, 2022
  • About
  • Advertise
  • Careers
Scoftware Magazine
  • Home
  • Politics
  • Business
  • Culture
  • Opinion
  • Lifestyle
  • Entertainment
  • Login
No Result
View All Result
Scoftware Magazine
Home Tech

Microsoft says new breach discovered in probe of suspected SolarWinds hackers

Jaleel M. by Jaleel M.
June 28, 2021
in Tech
0
Microsoft says new breach discovered in probe of suspected SolarWinds hackers
0
SHARES
10
VIEWS
Share on FacebookShare on Twitter


SAN FRANCISCO: Microsoft said on Friday an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers.

The company said it had found the compromise during its response to hacks by a team it identifies as responsible for earlier major breaches at SolarWinds and Microsoft.

Microsoft said it had warned the affected customers. A copy of one warning seen by Reuters said the attacker belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.

“A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions,” the warning reads in part. The U.S. government has publicly attributed the earlier attacks to the Russian government, which denies involvement.

When Reuters asked about that warning, Microsoft announced the breach publicly.

After commenting on a broader phishing campaign it said had compromised a small number of entities, Microsoft said it had also found the breach of its own agent, who it said had limited powers.

The agent could see billing contact information and what services the customers pay for, among other things.

“The actor used this information in some cases to launch highly-targeted attacks as part of their broader campaign,” Microsoft said.

Microsoft warned affected customers to be careful about communications to their billing contacts and consider changing those usernames and email addresses, as well as barring old usernames from logging in.

Microsoft said it was aware of three entities that had been compromised in the phishing campaign.

It did not immediately clarify whether any had been among those whose data was viewed through the support agent, or if the agent had been tricked by the broader campaign.

Microsoft did not say whether the agent was at a contractor or a direct employee.

A spokesman said the latest breach by the threat actor was not part of Nobelium’s previous successful attack on Microsoft, in which it obtained some source code.

In the SolarWinds attack, the group altered code at that company to access SolarWinds customers, including nine U.S. federal agencies.

At the SolarWinds customers and others, the attackers also took advantage of weaknesses in the way Microsoft programs were configured, according to the Department of Homeland Security.

Microsoft later said the group had compromised its own employee accounts and taken software instructions governing how Microsoft verifies user identities.

A White House official said the latest intrusion and phishing campaign was far less serious than the SolarWinds fiasco.

“This appears to be largely unsuccessful, run-of-the-mill espionage,” the official said.

Scott McConnell, a spokesman for Homeland Security’s Cybersecurity and Infrastructure Security Agency, said the defensive group “is working with Microsoft and our interagency partners to evaluate the impact. We stand ready to assist any affected entities.”

A SolarWinds spokesperson said, “The latest cyberattack reported by Microsoft does not involve our company or our customers in any way.”

Subscribe to Mint Newsletters

* Enter a valid email

* Thank you for subscribing to our newsletter.

Never miss a story! Stay connected and informed with Mint.
Download
our App Now!!

Topics



Source link

Related posts

This WhatsApp feature allows users to hide unwanted group chats without leaving them. Here’s how

This WhatsApp feature allows users to hide unwanted group chats without leaving them. Here’s how

July 29, 2021
WhatsApp in line for fine as data watchdogs resolve dispute

WhatsApp in line for fine as data watchdogs resolve dispute

July 28, 2021
Previous Post

All you  need  to  know about the new OS

Next Post

Asian Paints, Reliance Industries, NTPC propel indices; L&T disappoints

Next Post
Asian Paints, Reliance Industries, NTPC propel indices; L&T disappoints

Asian Paints, Reliance Industries, NTPC propel indices; L&T disappoints

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

RECOMMENDED NEWS

Kamaru Usman Outclasses Jorge Masvidal As UFC Debuts On ‘Fight Island’ In UAE

Kamaru Usman Outclasses Jorge Masvidal As UFC Debuts On ‘Fight Island’ In UAE

2 years ago
Hike introduces Hikeland, a virtual space to meet friends

Hike introduces Hikeland, a virtual space to meet friends

2 years ago
Beverly Johnson, Vogue’s First Black Cover Model, Calls on Anna Wintour to Make “Structural Changes”

Beverly Johnson, Vogue’s First Black Cover Model, Calls on Anna Wintour to Make “Structural Changes”

2 years ago
Twitter users can now use a physical security key to log-in their account

Twitter users can now use a physical security key to log-in their account

12 months ago

FOLLOW US

  • 114 Followers
  • 29.5k Followers
  • 172k Subscribers

BROWSE BY CATEGORIES

  • Business
  • Culture
  • Entertainment
  • Lifestyle
  • Music
  • National
  • News
  • Opinion
  • Politics
  • Sports
  • Tech
  • Travel
  • World News

BROWSE BY TOPICS

2018 League Balinese Culture Bali United Budget Travel Champions League Chopper Bike Doctor Terawan Istana Negara Market Stories National Exam Visit Bali

POPULAR NEWS

  • Charles B and Kamil Ghaouti Collaborate on Groovy New Track “You’re Not Mine,” featuring LauraBrown. Out on Protocol Recordings

    Charles B and Kamil Ghaouti Collaborate on Groovy New Track “You’re Not Mine,” featuring LauraBrown. Out on Protocol Recordings

    0 shares
    Share 0 Tweet 0
  • Kris Jenner Spills Details About Her Sex Life With Corey Gamble: Watch

    0 shares
    Share 0 Tweet 0
  • Sam Heughan & Graham McTavish Are Men in Kilts for Travel Show

    0 shares
    Share 0 Tweet 0
  • Salted vs. Unsalted Pistachios

    0 shares
    Share 0 Tweet 0
  • Common Saints Release New Single “Idol Eyes”

    0 shares
    Share 0 Tweet 0
  • About
  • Advertise
  • Careers

© 2020 Scoftware.com

No Result
View All Result
  • Home
  • Politics
  • Business
  • Culture
  • National
  • Sports
  • Lifestyle
  • Travel
  • Opinion

© 2020 Scoftware.com

Welcome Back!

Login to your account below

Forgotten Password?

Create New Account!

Fill the forms bellow to register

All fields are required. Log In

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Terms and Conditions - Privacy Policy