SolarWinds Attackers Return With Fresh Phishing Campaign

A Russian group that was behind the massive SolarWinds supply chain attack has returned with a fresh phishing campaign, according to Microsoft. This new campaign compromised a marketing firm used by the U.S. Agency for International Development – USAID – to send malicious messages to thousands of potential victims. Microsoft attributes this latest phishing campaign to an attack group that the company calls Nobelium, which also conducted the SolarWinds supply chain attack, which affected 18,000 users of the Orion network monitoring platform and resulted in follow-on attacks on nine government agencies and 100 companies. The U.S. government has accused Russia’s Foreign Intelligence Service, or SVR, of conducting the SolarWinds supply chain compromise.