Malwarebytes Hacked by SolarWinds Attackers

https://blog.malwarebytes.com/malwar...-environments/

The scope and breadth of the attacks are still not fully known. Anyone who says otherwise is simply drinking the Kool-Aid being supplied by the various governments attacked in order to pacify the people into believe that it isn't that serious (or else, they are one of the agents of said governments).

It's **VERY** serious. And much, much more widespread than we're being led to believe.

johngalt said:

The scope and breadth of the attacks are still not fully known. Anyone who says otherwise is simply drinking the Kool-Aid being supplied by the various governments attacked in order to pacify the people into believe that it isn't that serious (or else, they are one of the agents of said governments).
It's **VERY** serious. And much, much more widespread than we're being led to believe.

Couldn't have said it any better!

I don't use any of the MS software listed and since my subscription to Malwarebytes has passed, I've not had it installed in months now. Crazy!

The Malwarebytes products were not affected. It was some internal email.

The investigation indicates the attackers leveraged a dormant email protection product within our Office 365 tenant that allowed access to a limited subset of internal company emails. We do not use Azure cloud services in our production environments. Considering the supply chain nature of the SolarWinds attack, and in an abundance of caution, we immediately performed a thorough investigation of all Malwarebytes source code, build and delivery processes, including reverse engineering our own software. Our internal systems showed no evidence of unauthorized access or compromise in any on-premises and production environments. Our software remains safe to use.

<deleted quote>

While Malwarebytes does not use SolarWinds, we, like many other companies were recently targeted by the same threat actor. We can confirm the existence of another intrusion vector that works by abusing applications with privileged access to Microsoft Office 365 and Azure environments. After an extensive investigation, we determined the attacker only gained access to a limited subset of internal company emails. We found no evidence of unauthorized access or compromise in any of our internal on-premises and production environments.

If you go back and look at the timeline of the attacks being made public, the initial report was by another security firm - who reported that it had been hacked.

A good read on the whole timeline (as we know it now). The SolarWinds cyberattack: The hack, the victims, and what we know

johngalt said:

It's also worrying that you're completely ignoring what the blog post says (and which Porthos quoted right above your own post):



If you go back and look at the timeline of the attacks being made public, the initial report was by another security firm - who reported that it had been hacked.

A good read on the whole timeline (as we know it now). The SolarWinds cyberattack: The hack, the victims, and what we know

I’ve deleted the post.