Microsoft warns of recent activity by Nobelium focused on IT Companies

In late June 2021, Microsoft revealed through its Security Response Center (SRC) and other avenues that the Nobelium threat actor has been targeting its customers across 36 countries with password spray and brute-force attacks.

Microsoft detected malware on the system of a customer support agent that contained basic account information for some customers. It is suspected that Nobelium used this information to launch tailored and targeted attacks.

The majority of the targets were IT companies, which are an increasing focus for threat actors who see them as a conduit to access and compromise many more businesses. While Microsoft has said that Nobelium's recent conduct was largely unsuccessful, it confirmed that 3 entities had been compromised.