Malwarebytes said it is not a SolarWinds client but believes it was targeted by the same bad actors using vectors that target Microsoft Office 365 and Azure. Our software remains safe to use.”Īfter being breached last December, fellow cyber security company FireEye discovered malware that was being distributed in the supply chain of US network software firm SolarWinds.Īround 18,000 SolarWinds customers – which include US government and large enterprises – were directly impacted by the malware injection that was attributed to Russian intelligence. “Our internal systems showed no evidence of unauthorised access or compromise in any on-premises and production environments. “Considering the supply chain nature of the SolarWinds attack, and in an abundance of caution, we immediately performed a thorough investigation of all Malwarebytes source code, build and delivery processes, including reverse engineering our own software,” Kleczynski said.

Partnering with Microsoft’s cyber sleuths, the Malwarebytes team found the attackers exploited a “dormant email protection product” in part of the company’s Office 365 rollout and gained access to “a limited subset of internal company emails”.

In a blog post about the incident, Malwarebytes founder Marcin Kleczynski said Microsoft first alerted the firm to “suspicious activity” coming from a third-party application in Office 365. Cyber security company Malwarebytes was breached by the same actors which breached US government and business in last year’s massive SolarWinds attack.

Subscribe malewarebytes newsletter