Microsoft reveals hackers Solarwinds attacks 150 organizatio

[jiraporn66]

Microsoft said that SLOTXO Russian-backed hacker group behind the hack "Solar Winds" to elicit information from several government agencies last year. Has conducted a cyber attack on US government agencies. and abroad Including think tanks this week by using techniques of spear phishing or targeted attacks. through the email of the United States Agency for International Development (U.S. Agency for International Development).

Mr. Tom Burt, Vice President of Microsoft said in a blog post late Thursday evening: such an attack Aims at 3,000 email addresses of more than 150 organizations, at least a quarter of those organizations. work related to international development humanitarian assistance and human rights work

However, Microsoft did not say in a blog post how successful the group's efforts were.

Volexity, a cybersecurity company which monitors such hacks But it doesn't have the ability to track from email systems as much as Microsoft reports that a low detection rate of phishing emails indicates that hackers “It should have been fairly successful in infiltrating the target.”

Vice President of Microsoft also said this attack It shows that the Russian hacker group has made several ongoing attempts to “Aim at government agencies working on foreign policy. This is part of an intelligence collection effort.” These government agencies work across 24 countries.

hacker group Access your USAID Constant Contact email account, a marketing email account. As reported by Microsoft and sent a realistic phishing email dated May 25 by the content of the email. Claims to have new information about US election fraud in the past year and inserts links containing malware or programs designed to attack computers and networks That would allow hackers to gain access to computers that have been lax in security for a long time.

Microsoft also reported in another blog post that Such hacking attempts have been ongoing. and there are many ripples by using the spear phishing technique that are aimed at a specific person or company that was detected for the first time in January this past before it evolved into emailing mass users this week.

The hack is what cybersecurity experts call a “busy” or easy-to-detect action. while the attack event "Solar Winds" in the past year This allows hackers to infiltrate private companies. Dozens of think tanks Including nine other US government agencies, it was a smuggling attack that lasted most of the year. Before cybersecurity firm FireEye caught it in December of last year.

The Hack Solar Winds incident was an opportunistic update of some of the company's software. While this hack uses email as a tool. In both attacks, hackers aimed to destroy trust in technology systems.

[Mieszkaniowy]

Ładowanie ogłoszeń...