Author: Melodie Foster
Date: 21st January 2021
Malwarebytes, the antivirus firm, has been hacked by the SolarWinds attackers. It had been discovered that they’d been attacked during a Microsoft audit of Office 365 Azure infrastructure following detection of suspicious activity that was originating from a dormant Office 365 security app.
Malwarebytes said about the attack, “a newly released CISA report reveals how threat actors may have obtained initial access by password guessing or password spraying in addition to exploiting administrative or service credentials.”
Malwarebytes pointed out that the breach was not directly related to the SolarWinds attacks because Malwarebytes does not use any SolarWinds software in its internal IT structure. Furthermore, after an investigation of all Malwarebyte’s source code, build and delivery processes, it showed that there was no evidence of any compromise or unauthorised access.
The CEO of Malwarebytes wrote in a blogpost, “we received information from the Microsoft Security Response Center on December 15 about suspicious activity from a third-party application in our Microsoft Office 365 tenant consistent with the tactics, techniques and procedures of the same advanced threat actor involved in the SolarWinds attacks.”
Cyberfort Colocation Services
Cyberfort has invested heavily in secure infrastructure, making us the perfect colocation service provider to host your mission-critical, sensitive and regulated data.
Find out more >
Cyberfort Deep Dives
Cyberfort’s cybersecurity consultants explore issues in cyber threat intelligence, incident planning and data security. Read our whitepapers to help make decisions that benefit your business.
Find out more >