Popular cybersecurity company Malwarebytes claims it was hacked by the same people who attacked SolarWinds

The cybersecurity company Malwarebytes has been hacked. The famous security software company claims that some of your emails were recently compromised. They suggest whoever did it is the same one who attacked SolarWinds a few weeks ago by hacking into various US government agencies. Whoever is behind the attacks seems to be having a good time in the past few weeks.

As Malwarebytes reported, they were not using any software created by SolarWinds, so as a result of this attack, they themselves were not attacked, as was the case with many other companies. However, were attacked by the same hacking team and with a different technique.

Apparently the attackers They were able to access internal company emails Access Microsoft Office 365 and Microsoft Azure environments through Malwarebytes. With the access here, they could access various company-internal e-mails.

Either way, They say the Malwarebytes products themselves (their antivirus and security systems) are not affected and they are always safe to use. If these products had been affected, the problem would have been much more catastrophic, especially given that millions of people trust and use their security systems.

The attacker’s chaos at SolarWinds

he The attack on SolarWinds was one of the largest in 2020 and not in vain. SolarWinds provides software to tens of thousands of customers whose data has been compromised in a single attack overnight.

We know the attacker got at that time Steal tools piracy FireEye and navigate to an unspecified number of Microsoft repositories amongst other things. With this material he could later carry out other attacks more easily.

Despite the popularity of the attacks in recent weeks We don’t know who is behind them. US Secretary of State Mike Pompeo publicly accused Russia: “It can be said that it is pretty clear that the Russians are involved in this activity.” There is no clear evidence of this in either case and Russia has denied any connection to these attacks.

Via | ZDNet