Researchers Describe a Second, Separate SolarWinds Attack
Get Permission Russian hackers apparently weren't the only ones targeting SolarWinds customers. An attack last year by the Spiral hacking group, believed to be based in China, against one organization used "Supernova" malware that targeted a vulnerability in SolarWinds' Orion network monitoring software, according to the Secureworks Counter Threat Unit. In January, SolarWinds issued an advisory on that vulnerability, CVE-2020-10148, but it said no exploits had been discovered. SolarWinds issued a patch on Dec. 23, 2020. But Spiral exploited the vulnerability earlier, says Mike McLellan, di...
Source: databreachtoday.com