malwarebytes solarwinds azure officecimpanuzdnet

MALWAREBYTES SOLARWINDS AZURE OFFICECIMPANUZDNET PATCH
MALWAREBYTES SOLARWINDS AZURE OFFICECIMPANUZDNET SOFTWARE

The fixes included patches for a zero-day vulnerability under active exploitation, as well as over 80 other patches for vulnerabilities.

MALWAREBYTES SOLARWINDS AZURE OFFICECIMPANUZDNET PATCH

Microsoft recently issued security patches to resolve some aspects of the SolarWinds attack as part of its January 2021 Patch Tuesday. That's not forgetting that the first inkling of the SolarWinds attack came in early December 2020, when leading cybersecurity firm FireEye was hit with a nation-state attack, now presumed to be part of SolarWinds. Although Malwarebytes was made aware of the potential of an exploit in December 2020, it has taken over a month for confirmation. Malwarebytes was struck by the same lighting that attacked SolarWinds's system in 2020, being one of the most scandalous hacks in the past year. Related: Leading Cybersecurity Firm FireEye Hit by Nation-State Attack Isaiah Alonzo, Tech Times 19 January 2021, 10:01 pm. The threat actor combined numerous exploits and attack vectors to compromise numerous high-profile targets, including several US government agencies, Microsoft, and other high profile tech companies. The SolarWinds Victim Count Continues RisingĪs a recent CISA post states, SolarWinds was just one attack vector for this enormous attack. We found no evidence of unauthorized access or compromise in any of our internal on-premises and production environments Malwarebytes products remain safe.Īfter an extensive investigation, we determined the attacker only gained access to a limited subset of internal company emails. Malwarebytes was keen to stress that none of its consumer-facing products were affected and that the attackers gained access to a very limited amount of internal email data. The attackers specifically exploited a dormant email protection product. The Microsoft Security Response Center had previously flagged suspicious activity stemming from a dormant aspect of Malwarebytes Office 365 environment on 15 December. Even though they do not use SolarWinds, the attacker targeted Malwarebytes using an alternative attack vector, abusing 'applications with privileged access to Microsoft Office 365 and Azure environments.'

MALWAREBYTES SOLARWINDS AZURE OFFICECIMPANUZDNET SOFTWARE

In a post on the official Malwarebytes blog, the cybersecurity company confirmed that the 'nation state attack leveraging software from SolarWinds has caused a ripple effect throughout the security industry.'Ĭaught in the ripple is Malwarebytes. Malwarebytes Caught Up in SolarWinds Attack Here's what Malwarebytes is saying about SolarWinds.

Malwarebytes solarwinds azure officecimpanuzdnet