New SolarWinds consultant Alex Stamos became one of the first public figures to attribute the massive hacking campaign against SolarWinds to the Russian foreign intelligence service, or SVR. Stamos said Thursday that the SVR—also known as APT29 or Cozy Bear—excels at covering its tracks and quietly exfiltrating information from victims so it’s not noticed. Stamos, who was Facebook’s security chief, started last month as an independent consultant at SolarWinds, working alongside ex-Cybersecurity and Infrastructure Security Agency Director Chris Krebs to assist with crisis response. “One of the reasons that this campaign has been able to last for well over a year is because they [the SVR] are incredibly subtle about the intrusion into all these companies,” Stamos said during a conversation with SolarWinds CEO Sudhakar Ramakrishna as part of a webinar hosted by SolarWinds.