Microsoft said that since May 2021, the Nobelium group hacked at least 14 IT companies

Microsoft experts said that the Nobelium hack group (aka APT 29, Cozy Bear or The Dukes) is still carrying out attacks on the IT supply chain. According to experts, since May 2021, 140 managed service providers (MSP) and cloud services have been attacked, and at least 14 of them have been hacked.

Microsoft experts say that all of the attacks now detected were part of a well-planned campaign that began in May this year.

Typically, hackers relied on spear phishing and brute-force attacks, targeting reseller employees and technology service providers who manage IT and cloud infrastructure on behalf of their customers.

Indicators of compromise are already available in the company’s report.

Let me remind that we also wrote that Hacker group LightBasin hacked 13 telecoms in the last two years.