[ad_1]
The Russian hackers behind the SolarWinds hack are once again trying to infiltrate government networks in the US and Europe. About this CNN told cybersecurity analysts.
According to the channel, this is the same group of hackers that hacked into the systems of customers of SolarWinds, a software provider for US enterprises and government agencies, last December.
Hackers have used new tools and techniques to try to hack, said Charles Carmakal, senior vice president and CTO at cybersecurity firm Mandiant. They have created a threat to several government agencies that deal with political and foreign policy issues, as well as to technology providers who provide direct or indirect access to the systems of organizations in North America and Europe. It has not yet been reported whether the hackers managed to gain access to any data.
The December attack lasted several months and affected dozens of government departments, including nuclear laboratories and the Pentagon, the Treasury and the Commerce Department. The US authorities announced their involvement in the attack by the hacker group APT29, or Cozy Bear, which, according to the American side, is linked to Russian intelligence. At the same time, Moscow denied all accusations of involvement in the hacking of computer networks.
On May 28, Microsoft recorded yet another massive hacker attack on US and foreign government agencies and think tanks.
As the then vice president of the company Tom Burt said, the cyberattack targeted 3,000 mailboxes in 150 organizations working in the field of human rights protection. The main target of the attack was the United States, but at least 24 countries were affected.
A Microsoft spokesman argued that the marketing system of the United States Agency for International Development (USAID) was attacked, after which the hackers were able to send emails with phishing links to different addresses, which downloaded malicious software to users’ computers. After that, hackers gained access to user data.
[ad_2]
Source link
