SolarWinds Catch-Up
Summary
The Teardrop malware then loaded Cobalt Strike, a hacking toolkit designed for security professionals but that has since grown in popularity and use by malicious actors. The significant effort put into evading detection as well as a strong understanding of SolarWinds infrastructure have led researchers to speculate that this attack was the work of a foreign government. While Microsoft acted on the C2 domains, multiple US security agencies began to publish updates and remediation steps for anyone affected by the breach. The Cybersecurity and Infrastructure Security Agency (CISA) published Alert AA20-352A on the details of the breach and have continued to update the page as new developments arrived. News broke by The New York Times that TeamCity software, a product of JetBrains, may have been used as a vector for the attackers to gain access to SolarWinds.
Classifications
AskAI Classifications
LabelsLinked Companies
