(Credit: Malwarebytes)
The hackers behind the SolarWinds breach also infiltrated Malwarebytes, but they only managed to gain access to some internal emails, according to the antivirus provider’s investigation.
The intrusion didn’t occur through SolarWind’s IT software, which Malwarebytes doesn t use. Instead, the attackers exploited the company s accounts with Office 365 and Microsoft Azure.
“We can confirm the existence of another intrusion vector that works by abusing applications with privileged access to Microsoft Office 365 and Azure environments,” Malwarebytes said in a blog post on Tuesday.
On Dec. 15 the day after the SolarWinds hack became public Microsoft told the antivirus provider it had noticed suspicious activity coming from a third-party application within Malwarebytes’ Office 365 system.