Microsoft Warns of Attackers Using Trusted HPE Operations Agent for Malware

Cybersecuritynews •Tushar Subhra Dutta • May 15, 2026

A recent intrusion uncovered by security researchers revealed a calculated attack campaign that used a legitimate enterprise management tool as a weapon. The threat actor gained access through a compromised third-party IT services provider, then quietly moved through the victim’s environment using tools that were already approved and running. No obvious malware was dropped, and […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Alerts on Malware Abuse of HPE Operations Agent Microsoft has reported a stealthy intrusion campaign where attackers exploited the HPE Operations Agent, a trusted enterprise tool, to infiltrate networks without using traditional malware. The attackers gained access through a compromised third-party IT services provider and moved laterally within the victim's environment using legitimate software already in place. No vulnerabilities in the HPE Operations Agent were exploited, making detection difficult. The scope of the impact remains unclear, but the use of trusted tools indicates a significant shift in attack methodologies. Organizations are advised to review their security postures and monitor for unusual activity involving trusted applications. This incident highlights the evolving tactics of cyber adversaries who leverage existing trust relationships to evade detection. 2 sources 61

Microsoft Warns of Attackers Using Trusted HPE Operations Agent for Malware

The full story

Extracted Entities

Attack Types (1)

Tools (1)