# Malwarebytes Said It Was Hacked By the Same Group Who Breached SolarWinds

**URL:** <https://onehack.st/t/malwarebytes-said-it-was-hacked-by-the-same-group-who-breached-solarwinds/170444>\
**Category:** News & Articles\
**Tags:** hacking\
**Created:** [January 20, 2021, 2:32pm UTC](https://onehack.st/t/malwarebytes-said-it-was-hacked-by-the-same-group-who-breached-solarwinds/170444 "2021-01-20T14:32:31Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TheStrength](https://onehack.st/user_avatar/onehack.st/thestrength/32/46753_2.png) [@TheStrength](https://onehack.st/u/TheStrength)\
**Post date:** [January 20, 2021, 2:32pm UTC](https://onehack.st/t/malwarebytes-said-it-was-hacked-by-the-same-group-who-breached-solarwinds/170444/1 "2021-01-20T14:32:31Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/8/e/8e81db1279983fb9ce73695d9f3211e132636242.png)

US cyber-security firm Malwarebytes [said it was hacked by "Dark Halo](https://www.zdnet.com/article/malwarebytes-said-it-was-hacked-by-the-same-group-who-breached-solarwinds/)," the same group which [breached IT software company SolarWinds last year](https://it.slashdot.org/story/20/12/15/1810225/solarwinds-says-18000-customers-were-impacted-by-recent-hack). ZDNet reports:

_Malwarebytes said its intrusion is not related to the SolarWinds supply chain incident since the company doesn’t use any of SolarWinds software in its internal network. Instead, the security firm said the hackers breached its internal systems by exploiting an Azure Active Directory weakness and abusing malicious Office 365 applications. Malwarebytes said it learned of the intrusion from the Microsoft Security Response Center (MSRC) on December 15._

 

_At the time, Microsoft was auditing its Office 365 and Azure infrastructures for signs of malicious apps created by the SolarWinds hackers, also known in cyber-security circles as UNC2452 or Dark Halo. Malwarebytes said that once it learned of the breach, it began an internal investigation to determine what hackers accessed. “After an extensive investigation, we determined the attacker only gained access to a limited subset of internal company emails,” [said](https://blog.malwarebytes.com/malwarebytes-news/2021/01/malwarebytes-targeted-by-nation-state-actor-implicated-in-solarwinds-breach-evidence-suggests-abuse-of-privileged-access-to-microsoft-office-365-and-azure-environments/) Marcin Kleczynski, Malwarebytes co-founder and current CEO._