News Highlights: Russians Are Believed to Have Used Microsoft Resellers in Cyberattacks.
As the United States comes to grips with a far-reaching Russian cyberattack on federal agencies, private companies and national infrastructure, new evidence has emerged that the hackers were hunting their victims through multiple channels.
The most significant breaches discovered to date were based on software from SolarWinds, the Austin-based company whose updates put Russians at risk. But new evidence of that the security company CrowdStrike suggests that companies selling software on behalf of Microsoft were also used to break into Microsoft Office 365 software customers.
Since resellers are often entrusted to set up and maintain their customers’ software, they – like SolarWinds – have been an ideal cover for Russian hackers and a nightmare for Microsoft’s cloud customers, who still judge how deep the Russian hackers are. got into their systems.
“They couldn’t get straight into Microsoft 365, so they targeted the weakest point in the supply chain: the resellers,” said Glenn Chisholm, founder of Obsidian, a cybersecurity company.
CrowdStrike confirmed on Wednesday that it was also a target of the attack. In the case of CrowdStrike, the Russians were not using SolarWinds but a Microsoft reseller, and the attack was unsuccessful. A CrowdStrike spokeswoman, Ilina Dimitrova, declined to go beyond a company blog post describing the attempted attack.
The approach is very similar to the attack on Target in 2013, where hackers came in through the retailer’s heating and cooling supplier.
The latest Russian attacks, believed to have started last spring, have exposed a significant blind spot in the software supply chain. Companies can track phishing attacks and malware as long as they blindly trust vendors and cloud services such as Microsoft, Salesforce Google’s G-Suite, Zoom, Slack, SolarWinds and others, and give them wide access to employee email and corporate networks – they will never be safe, say cybersecurity experts.
“These cloud services create a web of interconnections and opportunities for the attacker,” said Mr. Chisholm. “What we are witnessing now is a new wave of modern attacks against these modern cloud platforms, and we need defense in 2021.”
Some reports have confused the latest development with a breach of Microsoft itself. But the company said last week it was sticking to its statement that it had not been hacked, nor was it being used to attack customers.
But the CrowdStrike discovery shows how the Russian hackers used their resellers to indirectly target their customers. CrowdStrike said in a blog post on Wednesday that hackers attempted to read the company’s emails from a reseller account but were unable to access its data or systems.
US officials only noticed the attack in recent weeks, and only when a private cybersecurity company, FireEye, warned US intelligence that the hackers had evaded layers of defense.
Clearly, the Treasury and Commerce Departments, the first agencies reported to be breached, were only part of a much larger operation whose sophistication astonished even experts who followed a quarter of a century of Russian hacking on the Pentagon and U.S. civilian agencies .
The National Security Agency – the leading US intelligence organization that both hackes foreign networks and defends national security agencies from attack – apparently did not know about the breach in SolarWinds’ network surveillance software until it was reported by FireEye last week. The National Security Agency itself uses SolarWinds software.
Two of the most embarrassing breaches came at the Pentagon and the Department of Homeland Security, whose Cybersecurity and Infrastructure Security Agency oversaw the successful defense of the US electoral system last month.
The Russian hackers behind the attack broke into the email system used by top Finance Ministry officials in July.
Computers at at least two dozen organizations – including Cisco, Intel, Nvidia, Deloitte, and the California Department of State Hospitals – appear to have been hacked, The Wall Street Journal reported. Some groups, such as Intel and Deloitte, said the attack did not affect their most delicate systems.
Via: www.nytimes.com
- Check the latest Hacking news updates and information.
- Please share this news Russians Are Believed to Have Used Microsoft Resellers in Cyberattacks with your friends and family to support us your one share helps us a lot.
- Follow us on Facebook and Twitter if you need more updates like this.
For Latest News Follow us on Google News
- Show all
- Trending News
- Popular By week
Urgent need for cybersecurity creates record demand for skilled professionals
Super Mario 64 FPS parody becomes speedrunning sensation
Knowledge hacking app Uptime, backed by former Tesco CEO, raises $ 16 million and appoints new media partner
Takeover bid for Arco Vara AS shares Tallinn Stock Exchange:ARC1T
San Antonio’s Cybersecurity Industry 30 Years After Michelangelo
Exclusive: India woos Tesla with offer of cheaper production costs than China
Cybercrime’s Dark Triad – Security Boulevard
Crash Bandicoot: On The Run is coming to Android and iOS in March
Chinese hackers try to block the power supply in Telangana; bid to attack TS Transco, TS Gene thwarted
Xiaomi VP confirms Super AMOLED screens for Redmi Note 10 series
Best 10 Guide by Compsmag
- The Best Gaming TVs Under $1000 March 1, 2021Serious gamers play in two ways. PC gamers usually sit at a desk and use their keyboard and mouse, staring at a monitor that is only a foot or two away and usually measures between 20 and 30 inches. Console players, on the other hand, often sit on a couch with a gamepad and a […]Mayank Bhardwaj
- The Best Powerbanks of 2021 February 27, 2021Best Powerbanks of 2021 â Power Bank for mobile phones now becomes a must have Gadget for all smartphone users. Although the Smartphones have a very high-performance battery with good standby time. However still, when it comes to working, it drains very quick. So to keep our mobile phone on, all of us need a power […]Compsmag Team
- 10 Ways To Make Your Android Phone Run Faster February 27, 2021Ways To Make Your Android Phone Run Faster â These days many peopleâs search for how to make Android run faster. So today weâre here to share some of the top and best methods to make Android run faster. We received many emails and comments to publish the best ways to make your Android phone run […]Compsmag Team
- The Best iPad Games of 2021 February 26, 2021Best iPad Games of 2021 â Are you looking for the Best games for iPad? You have come to The Best place. The App Store has so many excellent games to play but is often overwhelming with the amount of choice, making it tricky to separate the high from the garbage. Luckily, Compsmag loves playing games, so weâve rounded […]Mohit
- 3 iTunes cleanup tools to help you remove duplicates in iTunes February 26, 2021iTunes user would possibly find that someway their iTunes library has become large, containing lots off duplicates, which donât seem to be simple to do away with the use of iTunes itself. iTunes does supply a fundamental facility to show duplicates, however taking away all of them yourself manually can also be very laborious. Thatâs […]Compsmag Team
- Best Bluetooth Speakers Under $100 February 26, 2021Are you looking for the Best Bluetooth Speakers Under $100, but with so many great options, you do not know what to buy? There are hundreds of different budget speakers with different functions, and who knows what is best for you can be difficult. As a result, we searched the market and selected The Best […]Mayank Bhardwaj
- Best Cool Mist Humidifier In India February 26, 2021Are you looking for the Best Cool Mist Humidifier In India? The winters are quite exciting because of the cool breeze and the fresh air. As the days go by, you may feel dry skin, chapped lips, flu symptoms due to the cold. A unique solution to these problems is to have humidifiers at home. […]Mohit
- The Most Popular Video Websites February 24, 2021Most Popular Video Websites â Videos have become one of the hottest property on the Web, garnering millions of Web searches every single day all over the planet. The top video websites online as listed below are those ones that About Web Search readers have consistently ranked as allowing a user-friendly experience with a wide range […]Sumit Chauhan
- Best Pizza Maker In India February 23, 2021Are you looking for the Best Pizza Maker in India? To cook frozen or fresh pizzas, you absolutely must have a pizza-making of high quality, ergonomic and durable. Lately, pizza making has become even easier because of the large number of pizza makers on the market. Despite the growing number of these articles, you must […]Mohit
- Best Premium WordPress Themes Responsive February 23, 2021Are you looking for the best Premium WordPress themes responsive of 2021? Here is a big collection of best, Responsive, Premium WordPress themes for WordPress users to boost up your project or personal blog. Today, WordPress is the most powerful and uses a CMS(Content Management System) in the online world. Apart from this, WordPress also […]Sumit Chauhan
Popular Blog and Tutorial Tips
- How to Edit Default BackÂground ColÂor in Chrome Browser March 1, 2021This article is about How to Edit Default BackÂground ColÂor in Chrome Browser. So read this free guide, How to Edit Default BackÂground ColÂor in Chrome Browser step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: How to Edit Default BackÂground ColÂor in […]Jim Lopez
- How to look for App Updates on iOS and Android March 1, 2021This article is about How to look for App Updates on iOS and Android. So read this free guide, How to look for App Updates on iOS and Android step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: How to look for App […]Jim Lopez
- Daylio vs JourÂney: Comparison and Review March 1, 2021This article is about Daylio vs JourÂney: Comparison and Review. So read this free guide, Daylio vs JourÂney: Comparison and Review step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: Daylio vs JourÂney: Comparison and Review Do you remember all the cool things […]Jim Lopez
- Get Google Forms ResponsÂes in Email: Guide March 1, 2021This article is about Get Google Forms ResponsÂes in Email: Guide. So read this free guide, Get Google Forms ResponsÂes in Email: Guide step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: Get Google Forms ResponsÂes in Email: Guide While Google Forms gives […]Jim Lopez
- How to Install/UninÂstall PWAs in Chrome Browser March 1, 2021This article is about How to Install/UninÂstall PWAs in Chrome Browser. So read this free guide, How to Install/UninÂstall PWAs in Chrome Browser step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: How to Install/UninÂstall PWAs in Chrome Browser I think Progressive Web […]Jim Lopez
- Sending Google Forms ResponsÂes to MulÂtiÂple Email Addresses: Guide March 1, 2021This article is about Sending Google Forms ResponsÂes to MulÂtiÂple Email Addresses: Guide. So read this free guide, Sending Google Forms ResponsÂes to MulÂtiÂple Email Addresses: Guide step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: Sending Google Forms ResponsÂes to MulÂtiÂple Email […]Jim Lopez
- How to Check for Updates for Chrome BrowsÂer on Android, iOS, WinÂdows, and Mac March 1, 2021This article is about How to Check for Updates for Chrome BrowsÂer on Android, iOS, WinÂdows, and Mac. So read this free guide, How to Check for Updates for Chrome BrowsÂer on Android, iOS, WinÂdows, and Mac step by step. If you have query related to same article you may contact us. So Lets begin this guide: […]Jim Lopez
- Google News vs Apple News: Which App is Ideal for you March 1, 2021This article is about Google News vs Apple News: Which App is Ideal for you. So read this free guide, Google News vs Apple News: Which App is Ideal for you step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: Google News vs […]Jim Lopez
- Enable Dark Mode in Edge Chromium: Guide March 1, 2021This article is about Enable Dark Mode in Edge Chromium: Guide. So read this free guide, Enable Dark Mode in Edge Chromium: Guide step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: Enable Dark Mode in Edge Chromium: Guide Microsoft Edgeâs shift to […]Jim Lopez
- How to Use Google Keep App March 1, 2021This article is about How to Use Google Keep App. So read this free guide, How to Use Google Keep App step by step. If you have query related to same article you may contact us. So Lets begin this guide: Guide: How to Use Google Keep App Google has launched a simple, fast, and […]Jim Lopez