Nation-State Attacks : vimarsana.com

.
You’ve been hacked. It was by a nation-state.
27 January 2021 (Wall Street International)     The latest example of this type of cyber attack involved U.S. federal agencies and high-profile companies that were breached via a compromised and weaponized version of a software update from a connected third party.
Publicly reported information indicates that a vendor was infiltrated by a sophisticated nation-state cyber attack, which allowed for malware to be embedded and hidden in software updates that were legitimate, creating an entry point to any machine that installed the updates.
The case on software company SolarWinds is especially devastating and concerning. The malicious actors in this case compromised SolarWinds’ infrastructure via a method that puts the broader online environment at risk. As FireEye discovered and SolarWinds reports, the attackers incorporated their malware into an upgrade of the company’s Orion product that may have been installed by more than 18,000 customers, including government agencies.