On Monday, France’s cybersecurity agency ANSSI reported that “several French entities” experienced security breaches, attributing the attacks to a Russian hacker group known for their involvement in significant cyber incidents in previous years.
ANSSI revealed the detection of an “intrusion campaign” where hackers associated with the Russian military intelligence agency GRU infiltrated the French software company Centreon. The objective was to implant two types of malware into the networks of Centreon’s clients, resembling the “supply chain attack” seen in the recent SolarWinds compromise, which affected various U.S. government agencies and numerous other entities.
Centreon acknowledged the information in a statement, stating that it has noted the details. The company emphasized that, at this point, there is no conclusive evidence indicating that the identified vulnerability pertains to a commercial version supplied by Centreon during the relevant period.
Among its clients, Centreon includes notable names such as Airbus, Air France, Thales, ArcelorMittal, Électricité de France (EDF), telecoms firm Orange, and the French Ministry of Justice. The extent and specific organizations affected by the software hack remain unclear.
Developing story: Please stay tuned for further updates on this story.
