Microsoft Warns HPE Operations Agent Abused in Malware

Gbhackers •Mayura Kathir • May 15, 2026

Microsoft has revealed a stealthy intrusion campaign where attackers bypassed traditional malware and exploits, instead abusing trusted enterprise tools to silently infiltrate networks. The technique highlights a growing shift in cyberattacks where adversaries rely on legitimate software and existing trust relationships to evade detection. Notably, no vulnerability in HPE OA was exploited. Instead, threat actors […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Alerts on Malware Abuse of HPE Operations Agent Microsoft has reported a stealthy intrusion campaign where attackers exploited the HPE Operations Agent, a trusted enterprise tool, to infiltrate networks without using traditional malware. The attackers gained access through a compromised third-party IT services provider and moved laterally within the victim's environment using legitimate software already in place. No vulnerabilities in the HPE Operations Agent were exploited, making detection difficult. The scope of the impact remains unclear, but the use of trusted tools indicates a significant shift in attack methodologies. Organizations are advised to review their security postures and monitor for unusual activity involving trusted applications. This incident highlights the evolving tactics of cyber adversaries who leverage existing trust relationships to evade detection. 2 sources 61

Microsoft Warns HPE Operations Agent Abused in Malware

The full story

Extracted Entities

Attack Types (1)

Companies (2)