In the wave of attacks using REvil ransomware, Hacker group Cozy Bear attacked the National Committee of the US Republican Party.
According to Bloomberg sources, the well-known cybercriminal group APT 29, also known as Cozy Bear, is responsible for the attack. This group is believed to be responsible for the notorious hacking of the systems of the US Democratic National Committee in 2016 and the high-profile attack on SolarWinds in 2020, as a result of which nine government organizations were affected.Currently it is not known whether hackers managed to gain access or steal data and which ones. The RNC itself continues to deny the cyberattack.
After the article was published in Bloomberg, RNC chief of staff Richard Walters said that the committee became aware of a hack of its IT service provider Synnex.
Microsoft representatives declined to comment on the matter, citing the fact that they are not free to report anything without the permission of their customers.
It is difficult to say whether the attack on RNC is related to the wave of ransomware attacks by REvil, exploiting many previously unknown vulnerabilities in the software of the Miami-based company Kaseya.
There are suspicions that hackers attacked RNC through Synnex in Fremont, California, Bloomberg sources said, who wished to remain anonymous because they were not authorized to discuss confidential matters.
In a press release, Synnex stated that “it is aware of several cases in which external attackers tried to access client applications in the Microsoft cloud through Synnex.”
Let me remind you that we also reported that Russian hackers from Cozy Bear tried to steal COVID-19 research data.