They stole tools from FireEye and attempted to breach CrowdStrike, the companies said last month. Malwarebytes’s disclosure is the latest example of the attackers targeting security companies in the course of the hacking campaign. We have not identified any vulnerabilities in our products or cloud services.” Jeff Jones, a Microsoft representative, said in a statement, “Our ongoing investigation of recent attacks has found this advanced and sophisticated threat actor had several techniques in their toolkit. Upon investigation, Malwarebytes found “no evidence of unauthorized access or compromise in any of our internal on-premises and production environments,” he wrote. 15, Microsoft alerted Malwarebytes about “suspicious activity from a third-party application” that was consistent with the behaviors of the hackers that had exploited SolarWinds. If a reseller is breached and has access to a client’s credentials, the attacker could then hack into the client’s networks. said the hackers had attempted to break into their networks by compromising a third-party vendor that resells Microsoft services.

On Tuesday, the firm Symantec discovered a new form of malware used in the attack that wasn’t delivered through SolarWinds, suggesting the hack could be broader than previously understood. However, analysts have said that SolarWinds’s software wasn’t the only method the suspected Russian hackers used to breach networks. In many instances, attackers broke into systems through a compromised version of widely used software from Texas-based SolarWinds Corp. in December - was likely undertaken by Russia. intelligence agencies and the FBI have said the recent hacking campaign - which was found and disclosed by the cybersecurity firm FireEye Inc.

Subscribe malewarebytes newsletter