The organization behind the SolarWinds attack is back

Microsoft Corporation said that the organization behind the SolarWinds cyberattack discovered last year is currently targeting government agencies, research institutions, consulting agencies and non-profit organizations. goverment.
Microsoft said on its Blog: “This week, we discovered cyberattacks by Nobelium – the group that is targeting government agencies, research and consulting organizations and NGOs government”

Also according to Microsoft, Nobelium is the “Russian guy” and is also the person behind the attack targeting SolarWinds customers in 2020. The organization behind the SolarWinds cyberattack discovered last year is currently targeting government agencies, research institutions, think tanks and NGOs. The comments come weeks after a May 7 ransomware attack on the Colonial Pipeline that shut down the largest US fuel pipeline network for several days, disrupt the national supply, On May 27, Microsoft announced that: “This wave of attacks targeted approximately 3,000 email accounts at more than 150 different organizations.” Microsoft said that US organizations are the most vulnerable to attacks, targeted victims come from at least 24 different countries. According to Microsoft, at least a quarter of the organizations targeted are engaged in international development, humanitarian and human rights issues. This week, Nobelium launched attacks by breaking into a marketing email account of the United States Agency for International Development (USAID), thereby launching phishing attacks to multiple organizations. other. In statements issued Friday, the US Department of Homeland Security and USAID both said they have received and are in the process of investigating the above attack. The attack on information technology company SolarWinds, identified in December, accessed the information of thousands of companies and government offices using its products. Microsoft President Brad Smith described the attack as “the largest and most sophisticated attack the world has ever seen”. The attacks announced Thursday appear to be a continuation of multiple attempts to target government agencies involved in foreign policy, as part of an intelligence-gathering effort, Microsoft said. Intelligence. The company is currently in the process of notifying all of its target customers and has “no reason to believe” that these attacks are related to any exploits or vulnerabilities in the system. Microsoft products or services. Le Duyen (According to Reuters)