Russia-linked SolarWinds hackers, tracked as Nobelium or APT29, conducted news cyber attacks against other organizations. Most of the targeted organizations are IT companies (57%) followed by government organizations (20%) The hackers also targeted non-governmental organizations and think tanks, as well as financial services. Microsoft also discovered that the nation-state actors employed information-stealing malware on the device of one of its employees working as a customer support agent. Microsoft highlights the importance of best practices such as Zero-trust architecture and multi-factor authentication to prevent these attacks.”]
Source: https://securityaffairs.co/wordpress/119425/apt/solarwinds-nobelium-ongoing-campaign.html