CrowdStrike CEO explains why Russian hackers are hard to beat

“This is a very determined adversary, but we’ve seen Cozy Bear in many different accounts, and the thing that makes them so difficult is they’re low and slow, the way they operate,” Kurtz said. “If you look at some of the campaigns that have taken place over the years, it’s taken place over many years, right, this is how patient they are.”

Nobelium has tried to breach the systems of U.S. allies as well as the Department of Defense. The group was also responsible for breaching government supplier SolarWinds, one of the biggest cyberattacks in U.S. history. Microsoft’s technology was also breached by the group in connection with the SolarWinds attack.

Microsoft did not immediately respond to a request for comment

Kurtz characterized other foreign adversaries — such as hackers from China or even other Russian as — “smash and grabs,” saying Nobelium’s tactics are more drawn-out, patient and difficult to detect. He said CrowdStrike uses its algorithms to string together these “low signals” and identify such adversaries. Kurtz added that CrowdStrike has been able to stop the group in the past, saying that some of Microsoft’s customers seek additional support from his company.

“We’re helping all kinds of customers, and I think what I want to get back to is, security is a hard problem, one company is not going to solve it all,” he said. “We’re solving a big problem for our customers, and we’re helping them protect against these Microsoft-type breaches and vulnerabilities, and obviously that’s been a successful formula.”