Remote Access Giant Suffers Cyberattack by Russian Spies

A prominent remote access company has confirmed that its corporate network was compromised by government-backed hackers from Russia. The attack, attributed to APT29 (also known as Midnight Blizzard), was detected on June 26 and is believed to have originated from a standard employee account within the company's corporate IT environment.

The company, which provides remote access tools to over 600,000 paying customers, facilitating access to more than 2.5 billion devices worldwide, claims that the attack was contained within its corporate network and did not affect its product environment or customer data. However, the company's spokesperson declined to provide further information on whether any data was accessed or exfiltrated during the attack.

APT29 is a well-known and persistent government-backed hacking group, known for its use of simple yet effective techniques, including password theft, to conduct long-running stealthy espionage campaigns. The group has been linked to several high-profile attacks, including the compromise of Microsoft's corporate network earlier this year.

The attack on the remote access company is the latest in a series of cyberattacks attributed to Russian intelligence agencies. In recent months, Microsoft has struggled to eject the hackers from its systems, calling the campaign a "sustained, significant commitment" of the Russian government's "resources, coordination, and focus."

The incident highlights the ongoing threat posed by nation-state actors to companies and organizations worldwide. As the attack on the remote access company demonstrates, even seemingly secure networks can be compromised by sophisticated hackers.

Do you know more about the cyberattack? Get in touch.

AndroGuider Team

Articles written by the AndroGuider team. We try to make them thorough and informational while being easy to read.