Microsoft: Russia-Backed Hackers Targeting Cloud Services, Tech Firms

6 months ago 100

By Associated Press
October 25, 2021

Microsoft says the radical Nobelium has compromised astatine slightest 14 tech firms since May and seems to beryllium targeting unreality work resellers.

Microsoft said Monday the aforesaid Russia-backed hackers liable for the 2020 SolarWinds breach proceed to onslaught the planetary exertion proviso concatenation and person been relentlessly targeting unreality work companies and others since summer.

The group, which Microsoft calls Nobelium, has employed a caller strategy to piggyback connected the nonstop entree that unreality work resellers person to their customers' IT systems, hoping to “more easy impersonate an organization’s trusted exertion spouse to summation entree to their downstream customers." Resellers enactment arsenic intermediaries betwixt elephantine unreality companies and their eventual customers, managing and customizing accounts.

“Fortunately, we person discovered this run during its aboriginal stages, and we are sharing these developments to assistance unreality work resellers, exertion providers, and their customers instrumentality timely steps to assistance guarantee Nobelium is not much successful,” Tom Burt, a Microsoft vice president, said successful a blog post.

The Biden medication downplayed Microsoft’s announcement. A U.S. authorities authoritative briefed connected the contented who insisted connected anonymity to sermon the government’s effect noted that “the activities described were unsophisticated password spray and phishing, run-of-the mill operations for the intent of surveillance that we already cognize are attempted each time by Russia and different overseas governments.”

U.S. and Russian ties person already been strained this twelvemonth implicit a drawstring of high-profile ransomware attacks against U.S. targets launched by Russia-based cyber gangs. U.S. President Joe Biden has warned to Russian President Vladimir Putin to get him to ace down connected ransomware criminals, but respective apical medication cybersecurity officials person said precocious that they person seen nary grounds of that.

Additional reporting by The Associated Press.