Background In December 2020, news of the SolarWinds incident took the world by storm. While supply-chain attacks were already a documented attack vector leveraged by a number of APT actors, this specific campaign stood...
Autodesk, a California-based design software and 3D technology firm, has acknowledged that it was one of several tech and security companies targeted by a Russian-linked group that carried out the supply chain attack against...
Targeted attacks Putting the ‘A’ into APT In December, SolarWinds, a well-known IT managed services provider, fell victim to a sophisticated supply-chain attack. The company’s Orion IT, a solution for monitoring and managing customers’...
For four years, the Global Research and Analysis Team (GReAT) at Kaspersky has been publishing quarterly summaries of advanced persistent threat (APT) activity. The summaries are based on our threat intelligence research and provide...
The Sunburst backdoor gave the APT group access to thousands of SolarWinds customers’ networks, enabling them to explore those networks under the security radars of the organizations’ security teams. click here to read full...
The SolarWinds supply chain attackers manipulated OAuth app certificates to maintain persistence and access privileged resources including email, according to researchers at Proofpoint. click here to read full Article Read more on Malware updates...
Researchers found that out of all the companies and organizations that installed a backdoored SolarWinds Orion update, the majority were never targeted by the threat actors using Sunburst. Click here for image source link...
To protect useful attack vectors through SolarWinds, Microsoft, and VMWare, the hackers made every effort not to reuse infrastructures or settings or to tie one stage of the attack to another. Click here for...
Introduction On December 13, 2020, FireEye published a blog post detailing a supply chain attack leveraging Orion IT, an infrastructure monitoring and management platform by SolarWinds. In parallel, Volexity published an article with their...
Researchers from Kaspersky claimed they discovered several options that overlap with yet another backdoor identified as Kazuar, a .Internet-centered malware to start with documented by Palo Alto Networks in 2017. Graphic and Report Source...
So substantially continues to be unidentified about what is now getting termed the Sunburst hack, the cyberattack against U.S. governing administration businesses and corporations. U.S. officers commonly believe that Russian point out-sponsored hackers are...
Microsoft warned CrowdStrike previously this thirty day period of a unsuccessful endeavor by unidentified attackers to obtain and study the firm’s email messages, in accordance to a web site article published by the protection...
Right before achieving out to its C2 server, SUNBURST performs many checks to be certain no assessment tools are existing. It checks procedure names, file write timestamps, and Energetic Listing (Advert) domains just before...
What transpired SolarWinds, a properly-identified IT managed companies supplier, has just lately turn into a sufferer of a cyberattack. Their solution Orion System, a resolution for monitoring and taking care of their clients’ IT...
The most important names on this list include Cisco, SAP, Intel, Cox Communications, Deloitte, Nvidia, Fujitsu, Belkin, Amerisafe, Lukoil, Rakuten, Check out Issue, Optimizely, Electronic Achieve, and Digital Perception. Graphic and Posting Resource url...
On December 13, 2020 FireEye published important details of a newly discovered supply chain attack. An unknown attacker, referred to as UNC2452 or DarkHalo planted a backdoor in the SolarWinds Orion IT software. This...
