Downloaded from: justpaste.it/9cawj
Microsoft says new breach found in probe of
suspected SolarWinds hackers
Microsoft said an attacker had won access to one of its customer-service agents and then used
information from that to launch hacking attempts against customers
By Joseph Menn
SAN FRANCISCO (Reuters) -Microsoft said on Friday an attacker had won access to one of its customer-service
agents and then used information from that to launch hacking attempts against customers.
The company said it had found the compromise during its response to hacks by a team it identifies as responsible
for earlier major breaches at SolarWinds and Microsoft.
Microsoft said it had warned the affected customers. A copy of one warning seen by Reuters said the attacker
belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.
"A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft
customer support tools to review information regarding your Microsoft Services subscriptions," the warning reads
in part. The U.S. government has publicly attributed the earlier attacks to the Russian government, which denies
When Reuters asked about that warning, Microsoft announced the breach publicly.
After commenting on a broader phishing campaign it said had compromised a small number of entities, Microsoft
said it had also found the breach of its own agent, who it said had limited powers.
The agent could see billing contact information and what services the customers pay for, among other things.