PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

MICROSOFT SAYS: RUSSIAN SOLARWINDS HACKERS HIT U.S. GOVERNMENT AGENCIES AGAIN

hackerone.com | blog | #supply-chain | #phishing | #apt | #solarwinds | #russia | #nobelium | #usaid
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Microsoft says Nobelium, the Russian group behind SolarWinds, hijacked USAID's email via Constant Contact to hit 3,000+ accounts at 150+ organizations, extending its supply chain attack campaign.
Published
Collected

Related coverage

blog · jfrog.com
Lessons from the SolarWinds Breach: A Discussion With CISO Tim Brown
Former SolarWinds CISO Tim reflects on the historic Sunburst breach, fighting SEC charges, and securing the build pipeline against emerging AI threats.
research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
research · volexity.com
Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows
# Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows April 22, 2025 Charlie Gardner, Josh Duke, Matthew Meltzer, Sean Koessel, Steven Adair, and Tom Lancaster Since...
research · volexity.com
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
# Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication February 13, 2025 Charlie Gardner, Steven Adair, and Tom Lancaster Starting in mid-January 2025, Volexity identified...
research · volexity.com
Suspected APT29 Operation Launches Election Fraud Themed Phishing Campaigns
On May 25, 2021, Volexity identified a phishing campaign targeting multiple organizations based in the United States and Europe. The following industries have been observed being targeted thus far: NGOs […]
research · volexity.com
Responding to the SolarWinds Breach: Detect, Prevent, and Remediate the Dark Halo Supply Chain Attack
Earlier this week, Volexity published a blog post providing details observed from multiple incident response efforts involving Dark Halo, the group tied to the SolarWinds breach. Since publication, Volexity has fielded and […]
Back