October 1, 2022

Microsoft says new breach discovered in probe of suspected SolarWinds hackers, United States News & Top Stories

SAN FRANCISCO (REUTERS) – Microsoft says an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers.

The company said on Friday (June 25) it had found the compromise during its response to hacks by a team it identifies as responsible for earlier major breaches at SolarWinds and Microsoft.

Microsoft said it had warned the affected customers.

A copy of one warning seen by Reuters said the attacker belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.

“A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions,” the warning reads in part.

The US government has publicly attributed the earlier attacks to the Russian government, which denies involvement.

When Reuters asked about that warning, Microsoft announced the breach publicly.

After commenting on a broader phishing campaign it said had compromised a small number of entities, Microsoft said it had also found the breach of its own agent, who it said had limited powers.

The agent could see billing contact information and what services the customers pay for, among other things.

“The actor used this information in some cases to launch highly-targeted attacks as part of their broader campaign,” Microsoft said.

Microsoft warned affected customers to be careful about communications to their billing contacts and consider changing those usernames and email addresses, as well as barring old usernames from logging in.

Microsoft said it was aware of three entities that had been compromised in the phishing campaign.

It did not immediately clarify whether any had been among those whose data was viewed through the support agent, or if the agent had been tricked by the broader campaign.

Microsoft did not say whether the agent was at a contractor or a direct employee.

A spokesman said the latest breach by the threat actor was not part of Nobelium’s previous successful attack on Microsoft, in which it obtained some source code.

In the SolarWinds attack, the group altered code at that company to access SolarWinds customers, including nine US federal agencies.

At the SolarWinds customers and others, the attackers also took advantage of weaknesses in the way Microsoft programs were configured, according to the Department of Homeland Security.

Microsoft later said the group had compromised its own employee accounts and taken software instructions governing how Microsoft verifies user identities.

A White House official said the latest intrusion and phishing campaign was far less serious than the SolarWinds fiasco.

“This appears to be largely unsuccessful, run-of-the-mill espionage,” the official said.

Scott McConnell, a spokesman for Homeland Security’s Cybersecurity and Infrastructure Security Agency, said the defensive group “is working with Microsoft and our interagency partners to evaluate the impact. We stand ready to assist any affected entities.”

in World
Related Posts

Israeli commander describes harrowing Florida condo rescue operation, United States News & Top Stories

June 29, 2021

June 29, 2021

SURFSIDE, FL ORIDA (REUTERS) – Colonel Golan Vach, head of a unit of the Israel Defence Forces that specialises in...

UN confirms 18.3 deg C record heat in Antarctica, Europe News & Top Stories

July 1, 2021

July 1, 2021

GENEVA (AFP) – The United Nations on Thursday (July 1) recognised a new record high temperature for the Antarctic continent,...

Budapest renames streets in Chinese university protest, Europe News & Top Stories

June 2, 2021

June 2, 2021

BUDAPEST (AFP) – Budapest has renamed streets around the planned site of a top Chinese university to protest an “unwanted”...

COP26: Glasgow braces for climate protests on global day of action, Europe News & Top Stories

November 6, 2021

November 6, 2021

GLASGOW (AFP) – Glasgow was on Saturday (Nov 6) bracing for a second day of protests against what campaigners say...

US air travellers top 2 million for first time in pandemic, United States News & Top Stories

June 13, 2021

June 13, 2021

WASHINGTON (BLOOMBERG) – Daily US air travellers exceeded 2 million for the first time since the coronavirus pandemic began, reaching...

US vows ‘all in’ approach for domestic climate policy, in line with call to others to cut emissions, United States News & Top Stories

May 23, 2021

May 23, 2021

SINGAPORE -The United States is “all in” when it comes to climate change, and is working to ensure that its...

Giuliani pressed Ukrainians to probe Biden allegations in 2019 call: CNN, United States News & Top Stories

June 8, 2021

June 8, 2021

WASHINGTON (REUTERS) – The audiotape of a July 2019 phone call shows former US President Donald Trump’s then-lawyer Rudy Giuliani...

Sole boy survivor in Italy cable car accident out of intensive care, Europe News & Top Stories

June 1, 2021

June 1, 2021

ROME (AFP) – The five-year-old boy who was the sole survivor of an Italian cable car crash that killed 14...

Biden says he has reached infrastructure deal with bipartisan US senators, United States News & Top Stories

June 24, 2021

June 24, 2021

WASHINGTON (BLOOMBERG) – President Joe Biden said he has reached a tentative deal with a group of Democratic and Republican...

Germany offers $1.8 billion to Namibia to atone for genocide, Europe News & Top Stories

May 28, 2021

May 28, 2021

BERLIN (REUTERS, AFP) – Germany apologised on Friday (May 28) for its role in the slaughter of Herero and Nama...

Meghan and Harry name new baby daughter after Queen Elizabeth and Diana, Europe News & Top Stories

June 6, 2021

June 6, 2021

LONDON (REUTERS) – Meghan, Britain’s Duchess of Sussex, has given birth to her second child, a baby girl, whom she...

‘What’s the price today?’: US FBI phone app reaped secrets of global drug networks, United States News & Top Stories

June 16, 2021

June 16, 2021

WASHINGTON (AFP) – One drug trafficker texted another that he had a “job” and a proven way to get it...

With child-size needles, France starts giving Covid-19 jab to 12-year-olds, Europe News & Top Stories

June 15, 2021

June 15, 2021

VITRY-SUR-SEINE (REUTERS) – Perceval Gete, a 12-year-old French boy, is one of the youngest people in Europe to receive a...

Muslim countries seek UN probe into possible crimes in Gaza conflict, Middle East News & Top Stories

May 26, 2021

May 26, 2021

GENEVA (REUTERS) – Muslim countries are calling on the United Nations to investigate possible crimes committed during the 11-day conflict...

US lawmakers urge Facebook to drop plans for Instagram for kids, United States News & Top Stories

May 18, 2021

May 18, 2021

WASHINGTON (REUTERS) – A group of Democratic US lawmakers on Tuesday (May 18) urged Facebook Inc to drop plans for...