Internal emails stolen in hack targeting cybersecurity company Malwarebytes
Cybersecurity software firm Malwarebytes Inc. has been hacked and internal emails stolen.
The hack, revealed today, is being attributed to the nation-state actor implicated in the Solar Winds Worldwide LLC breach, though Malwarebytes noted that it doesn’t use Solar Winds products itself. The intrusion vector involved attackers abusing applications with privileged access to Microsoft Office 365 and Azure environments.
The emails stolen are described only as a “limited subset of internal company emails” with no evidence of unauthorized access or compromise to any of the company internet on-premises or production environments.