Microsoft was slowed down by the same group that damaged the networks of software makers SolarWinds and several federal agencies, Reuters reported, citing people familiar with the case.
In response to the report, Microsoft said they found a backend version of SolarWinds software in its network, but found no evidence that it was used to damage the company’s production system or access messenger data.
In a recitation issued by Microsoft spokesman Frank X. Shaw, company officials wrote:
Like other SolarWinds customers, we have been looking for signs of this actor and can confirm that we have found SolarWinds malicious binaries in our environment, which we have removed and removed. We found no evidence of access to production services or messenger data. Our ongoing investigations have completely uncovered that our systems have been used to attack others.
Although the statement did not stop saying that no part of the Microsoft network was compromised, it nevertheless challenged key parts of the Reuters statement.
Calling the same people, Reuters said that after the hackers hacked Microsoft, they used Microsoft’s own products in follow-up hacks against others. It was not immediately clear how many Microsoft users were affected or what Microsoft products were used. Microsoft representatives did not immediately return an email seeking comment.
Microsoft is just one of the recent additions to a list of fast-growing victims in the broad and progressive sphere who were reportedly backed by the Russian government. Politico said the U.S. Department of Energy and the National Nuclear Security Administration had evidence that the same carriers were gaining access to their networks. Bloomberg News reported that three unidentified U.S. states were captured in the same operation. The Intercept, meanwhile, said the hackers had been inside the city of Austin, Texas, for months.
The fast-growing publications confirm the skill, control and resources possessed by the hackers. In a warning issued earlier Thursday, the Cybersecurity Infrastructure and Security Agency said the hacks posed a “major threat” to U.S. governments at all levels.
It is likely that new details will be available in the next few hours. This story will be updated as needed.