A second and unrelated hacking group was likely involved in the massive SolarWinds breach, according to Microsoft.

The investigation into the digital compromise led to the discovery of “an additional malware that also affects the SolarWinds Orion product but has been determined to be likely unrelated to this compromise,” according to a blog post by Microsoft published on Friday. They noted that the malware was likely “used by a different threat actor.”