The company said that the threat actor’s name was Nobelium and it’s targeting government agencies, think tanks, consultants and non-governmental organizations (NGOs). “This wave of attacks targeted approximately 3,000 email accounts at more than 150 different organizations," the company said in a blog post. “Nobelium, originating from Russia, is the same actor behind the attacks on SolarWinds customers in 2020," the company said. The hackers snuck malicious code into a software called Orion, using it to compromise many organizations, including nine US government agencies. However, the company also noted that Windows Defender, the anti-malware program that’s pre-installed on Windows, was able to stop attacks on its customers.
Source: Mint May 28, 2021 15:45 UTC