Microsoft Tells Affected Users SolarWinds Hacker Had Gained Access to Its Customer Service Tools

<div class="content_text row description" readability="48.213398163155"> <p>Microsoft said on Friday an attacker had won access to one of its customer-service agents and then used information from that to launch hacking attempts against customers.</p> <p>The company said it had found the compromise during its response to hacks by a team it identifies as responsible for earlier major breaches at <a href="https://gadgets.ndtv.com/tags/solarwinds" target="_self" rel="noopener">SolarWinds</a> and <a href="https://gadgets.ndtv.com/microsoft" target="_self" rel="noopener">Microsoft</a>.</p> <p>Microsoft said it had warned the affected customers. A copy of one warning seen by Reuters said that the attacker belonged to the group Microsoft calls Nobelium and that it had access during the second half of May.</p> <p>“A sophisticated Nation-State associated actor that Microsoft identifies as NOBELLIUM accessed Microsoft customer support tools to review information regarding your Microsoft Services subscriptions,” the warning reads in part.</p> <p>After Reuters asked about that warning, Microsoft <a href="https://msrc-blog.microsoft.com/2021/06/25/new-nobelium-activity/" target="_blank" rel="nofollow noopener">announced</a> the breach publicly.</p> <p>After commenting on a broader phishing campaign that it said had compromised a small number of entities, Microsoft said it had also found the breach of its own agent, who it said had limited powers.</p> <p>The agent could see billing contact information and what services the customers pay for, among other things.</p> <p>“The actor used this information in some cases to launch highly-targeted attacks as part of their broader campaign,” Microsoft said.</p> <p><em>© Thomson Reuters 2021</em></p> <hr> </div> <p class="downloadtxt margin_b20">For the latest <a href="https://gadgets.ndtv.com/news">tech news</a> and <a href="https://gadgets.ndtv.com/reviews">reviews</a>, follow Gadgets 360 on <a href="https://twitter.com/gadgets360" target="_blank" rel="nofollow noopener">Twitter</a>, <a href="https://facebook.com/gadgets360" target="_blank" rel="nofollow noopener">Facebook</a>, and <a href="https://news.google.com/publications/CAAqBwgKMILm3AowtoHPAQ?hl=en-IN&gl=IN&ceid=IN%3Aen" target="_blank" rel="nofollow noopener">Google News</a>. For the latest videos on gadgets and tech, subscribe to our <a href="https://www.youtube.com/channel/UCx5e1u7BX0aKwEj3sdYXdXg?sub_confirmation=1" target="_blank" rel="nofollow noopener">YouTube channel</a>.</p> <div class="story_nextprv"> <div class="left_story"> <a href="https://gadgets.ndtv.com/internet/news/youtube-videos-xinjiang-blocked-human-right-watch-group-violation-china-atajurt-kazakh-activist-google-2472828"> <i class="sprite"></i> </p> <div class="story_image"> <img class="lazy" src="https://gadgets.ndtv.com/static/desktop/images/spacer.png" data-original="https://i.gadgets360cdn.com/large/youtube_reuters_small_1558677969533.JPG?downsize=90:68&output-quality=70" alt="" width="90" height="68" loading="lazy"> </div> <p> <span>YouTube Takes Down Xinjiang Videos Forcing Atajurt Kazakh Human Rights’ Channel to Seek Alternative</span> </a> </div> </p></div> <h4 class="innerContainer hd">Related Stories</h4> <p>The post <a rel="nofollow" href="https://patabook.com/technology/2021/06/26/microsoft-tells-affected-users-solarwinds-hacker-had-gained-access-to-its-customer-service-tools/">Microsoft Tells Affected Users SolarWinds Hacker Had Gained Access to Its Customer Service Tools</a> appeared first on <a rel="nofollow" href="https://patabook.com/technology">Patabook Technology</a>.</p>

source https://patabook.com/blogs/99903/Microsoft-Tells-Affected-Users-SolarWinds-Hacker-Had-Gained-Access-to