• 22/04/2022
  • By binternet
  • 696 Views

SolarWinds case: Microsoft points to a new cyber espionage offensive against Western organizations<

Russian hackers are on the move again. The Nobelium group, at the origin of a vast computer attack in the United States last year, leads a new offensive against American and European organizations, warned the computer giant Microsoft.

"Nobelium is attempting to replicate the strategy used in past attacks by targeting organizations that are integral to the IT industry's global supply chain," Tom Burt, vice-president president of Microsoft in charge of customer security. Mr. Burt specifies that these new attacks were detected from May.

Read alsoArticle reserved for our subscribersThe SolarWinds affair, one of the “most sophisticated cyber espionage operations of the decade”

Since then, Microsoft has notified more than 140 “resellers” (companies offering customization services for the use of remote computing, or “cloud”) and suppliers of technology servers that have been targeted. Nobelium became known to the general public in 2020 for the massive hack of the IT management software publisher SolarWinds. The group had carried out a vast operation affecting at least eight American administrations.

Upsurge in attacks

Microsoft and US authorities accuse the Russian government of supporting these hackers, which Moscow categorically denies. US President Joe Biden had imposed financial sanctions on Russia and expelled Russian diplomats following the SolarWinds hack.

Affaire SolarWinds : Microsoft pointe une nouvelle offensive de cyberespionnage contre des organisations occidentales

“This recent activity is a new indicator that Russia is trying to gain long-term and systematic access to various entry points in the technological supply chain and to establish a monitoring mechanism – now or in the future – targets of interest to the Russian government," said Burt.

Read alsoRansomware: “Hackers have an interest in the victim recovering their data”

The official specifies that this operation is part of a resurgence of computer attacks carried out by Nobelium. From July 1 to October 19, Microsoft informed 609 of its customers of nearly 23,000 attacks, a tiny number of which succeeded. Between June 2018 and June 2021, the Redmond (Washington) group "only" recorded a total of 20,500 hacking attempts from all state actors.

Microsoft on Monday released a series of technical recommendations to help customers better protect themselves against Nobelium attacks.

The World with AFP

The contribution area is reserved for subscribers. Subscribe to access this discussion space and contribute to the discussion.Subscribe Already a subscriber? To log in

Contribute