Categories: Cyber Attack

SolarWinds Hackers Accessed Emails of US Department of Homeland Security (DHS) Officials

Recently, the Homeland security officials (DHS) of the US department came to the list of the victim of the SolarWinds attack. However, the  DHS is the administrative department of the United States federal government.

This department is accountable for public safety, similar to the central ministries of other countries. After a proper investigation, the cybersecurity analysts knew that the cybercriminals had gained access to the email accounts of the key members of DHS, including secretary Chad Wolf.

According to the reports, the DHS is one of the latest victims of the SolarWinds Worldwide LLC hacking attack. The agency has again reported that they have been suspecting the Russian hacking group for this attack. 

The agency also asserted that the hackers had accessed the email accounts of all senior DHS officials, that also includes Chad Wolf, the secretary of Homeland Security.

New Disclosures

The security researchers, after knowing about the attack, concluded that this complex action professes a severe risk to critical infrastructures.

And this attack also indicates that its destruction will be complex, and as time passes, there will be more victims of this attack. Moreover, in this attack, various high-profile leaders of other agencies were also targeted by the threat actors. 

The list includes a member of the White House advisers and former Energy Department Secretary Dan Brouillette. Not only this, but the newly leaked information implies that all the damages were considerably worse than previously thought.

All these attacks have particularly revealed all kind of sensitive data. The analysts affirmed that the new data had not changed the policy of the White House, but the investigation is pointing that the threat actors that are responsible for this attack belong to Russia.  

Which Government Agencies Were Affected?

The government agencies that were affected in the SolarWinds hacking attack were mentioned below:-

  • Homeland Security, State, Commerce and Treasury.
  • The National Institutes of Health.
  • The National Nuclear Security Administration.
  • Energy department.
  • Commerce Department.
  • Treasury Department.

But, it’s still not confirmed that exactly how many companies and government departments have been affected or attacked by the SolarWinds hackers. But there was a report that has been stated by the cybersecurity analysts, which says that last month it was estimated that there were 18,000 companies that were attacked.  

The government agencies are trying their best to circumvent all these attacks; however, the US government had agreed that a total of nine federal agencies and nearly 100 private sector companies were involved in the attack.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity, and hacking news updates.

Balaji

BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

2 days ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

2 days ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

2 days ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

2 days ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

2 days ago