Russian Hackers Behind SolarWinds Attack Are Targeting the Supply Chain, Microsoft Says

silhouette of person with hoodie on

The same group of Russian hackers behind the December 2020 SolarWinds attack are targeting companies in the U.S. technology supply chain, according to a Monday report released by Microsoft.

Russian hacking group Nobelium is targeting cloud infrastructure companies and information technology software resellers in an attempt to gain access to these companies’ customers, according to Microsoft’s research. Microsoft believes Nobelium to be the same group responsible for the SolarWinds hack in late 2020 that affected multiple Cabinet-level agencies, federal contractors and critical infrastructure companies.

“This recent activity is another indicator that Russia is trying to gain long-term, systematic access to a variety of points in the technology supply chain and establish a mechanism for surveilling – now or in the future – targets of interest to the Russian government,” Tom Burt, Microsoft’s vice president for customer security and trust, wrote in the report.

Read More