Advertisement
Microsoft uncovers new breach while investigating SolarWinds hackers
- An attacker accessed a customer-service agent’s account and used it to try to hack Microsoft customers, the company said
- The White House said the breach is less serious than SolarWinds, calling it ‘unsuccessful, run-of-the-mill espionage’
Reading Time:2 minutes
Why you can trust SCMP
0
Microsoft said on Friday an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers.
The company said it had found the compromise during its response to hacks by a team it identifies as responsible for earlier major breaches at SolarWinds and Microsoft.
Microsoft said it had warned the affected customers. A copy of one warning seen by Reuters said the attacker belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.
“A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions,” the warning reads in part. The US government has publicly attributed the earlier attacks to the Russian government, which denies involvement.
When Reuters asked about that warning, Microsoft announced the breach publicly.
Advertisement