December 9, 2022

Microsoft says new breach discovered in probe of suspected SolarWinds hackers, United States News & Top Stories

SAN FRANCISCO (REUTERS) – Microsoft said on Friday (June 25) an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers.

The company said it had found the compromise during its response to hacks by a team it identifies as responsible for earlier major breaches at SolarWinds and Microsoft.

Microsoft said it had warned the affected customers. A copy of one warning seen by Reuters said that the attacker belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.

“A sophisticated Nation-State associated actor that Microsoft identifies as Nobelium accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions,” the warning reads in part.

The US government has publicly attributed the earlier attacks to the Russian government, which denies involvement.

When Reuters asked about that warning, Microsoft announced the breach publicly.

After commenting on a broader phishing campaign that it said had compromised a small number of entities, Microsoft said it had also found the breach of its own agent, who it said had limited powers.

The agent could see billing contact information and what services the customers pay for, among other things.

“The actor used this information in some cases to launch highly-targeted attacks as part of their broader campaign,” Microsoft said.

Microsoft warned affected customers to be careful about communications to their billing contacts and consider changing those usernames and email addresses, as well as barring old usernames from logging in.

Microsoft said it was aware of three entities that had been compromised in the phishing campaign.

It did not immediately clarify whether any had been among those whose data was viewed through the support agent, or if the agent had been tricked by the broader campaign.

Microsoft did not say whether the agent was at a contractor or a direct employee.

A spokesman said the latest breach by the threat actor was not part of Nobelium’s previous successful attack on Microsoft, in which it obtained some source code.

In the SolarWinds attack, the group altered code at that company to access SolarWinds customers, including nine US federal agencies.

At the SolarWinds customers and others, the attackers also took advantage of weaknesses in the way Microsoft programs were configured, according to the Department of Homeland Security.

Microsoft later said that the group had compromised its own employee accounts and taken software instructions governing how Microsoft verifies user identities.

DHS’ Cybersecurity and Infrastructure Security Agency did not respond to a request for comment.

in World
Related Posts

At a time when climate change is making heat waves more frequent, trees are stationary superheroes, United States News & Top Stories

July 3, 2021

July 3, 2021

DES MOINES (NYTIMES) – The trees were supposed to stay. It did not matter that the owners of the squat...

Bali, Jakarta bombings suspect Hambali to be tried on Aug 30 by US military, United States News & Top Stories

June 28, 2021

June 28, 2021

WASHINGTON – The world will soon get a new look at the man accused of plotting the October 2002 bombing...

In Memorial Day speech, Biden defends ‘imperfect’ democracy, United States News & Top Stories

May 31, 2021

May 31, 2021

ARLINGTON (REUTERS) – US President Joe Biden used his Memorial Day speech on Monday (May 31) to defend America’s “imperfect”...

US senators haggle over funding of US$1 trillion infrastructure compromise, United States News & Top Stories

June 20, 2021

June 20, 2021

WASHINGTON (REUTERS) – A bipartisan infrastructure plan costing a little over US$1 trillion (S$1.34 trillion), only about a fourth of...

With child-size needles, France starts giving Covid-19 jab to 12-year-olds, Europe News & Top Stories

June 15, 2021

June 15, 2021

VITRY-SUR-SEINE (REUTERS) – Perceval Gete, a 12-year-old French boy, is one of the youngest people in Europe to receive a...

Women troops marching in heels spark Ukraine outrage, Europe News & Top Stories

July 3, 2021

July 3, 2021

KIEV (AFP) – Ukrainian authorities found themselves buried in controversy Friday (July 2) after official pictures showed women soldiers practising...

US to send 3 million Covid-19 vaccine doses to Brazil after single-day record in cases, World News & Top Stories

June 23, 2021

June 23, 2021

WASHINGTON (REUTERS) – The United States on Thursday (June 24) will ship three million doses of the Johnson & Johnson one-shot...

Success of climate change talks rests on finance, says UN chief, Europe News & Top Stories

June 24, 2021

June 24, 2021

BRUSSELS (REUTERS) – The success of international climate negotiations in November will depend on a breakthrough in financial contributions from...

South Africa to tighten Covid-19 restrictions for 14 days, World News & Top Stories

June 27, 2021

June 27, 2021

JOHANNESBURG (REUTERS) – South Africa will tighten Covid-19 restrictions for 14 days as current containment measures are insufficient to cope...

Crime boss’s wild claims shake Turkish government, Europe News & Top Stories

May 27, 2021

May 27, 2021

ANKARA (AFP) – Millions of Turks have been glued to their screens, watching a crime boss tell wild stories about...

French President Macron slapped in face during walkabout, Europe News & Top Stories

June 8, 2021

June 8, 2021

PARIS (REUTERS) – French President Emmanuel Macron was slapped in the face on Tuesday (June 8) by a man in...

Meghan and Harry name new baby daughter after Queen Elizabeth and Diana, Europe News & Top Stories

June 6, 2021

June 6, 2021

LONDON (REUTERS) – Meghan, Britain’s Duchess of Sussex, has given birth to her second child, a baby girl, whom she...

Russia rejects new lockdown despite record coronavirus deaths for fourth straight day, Europe News & Top Stories

July 2, 2021

July 2, 2021

MOSCOW (AFP) – Russia on Friday (July 2) said it would not impose a new lockdown despite reporting a record number...

Israeli commander describes harrowing Florida condo rescue operation, United States News & Top Stories

June 29, 2021

June 29, 2021

SURFSIDE, FL ORIDA (REUTERS) – Colonel Golan Vach, head of a unit of the Israel Defence Forces that specialises in...

Biden hosts Israeli president ahead of Bennett visit, United States News & Top Stories

June 28, 2021

June 28, 2021

WASHINGTON (AFP) – President Joe Biden on Monday (June 28) reassured Israel’s president, ahead of a visit by new Prime...