3 ms·
It seems like this incident has impacted not only the U.S. Treasury, but other U.S. government agencies. The Washington Post also stipulates that the group beh
by ethanolburner 6y ago
It seems like this incident has impacted not only the U.S. Treasury, but other U.S. government agencies.
The Washington Post also stipulates that the group behind it also hacked FireEye [1].
Makes me wonder if the TTP used for this attack is similar to the FireEye breach (if of course it really was APT29 behind both attacks).
Edit: Reuters reporter Chris Bing says he is hearing the way FireEye got hacked is similar to these government agencies [2].
[1]: https://www.washingtonpost.com/national-security/russian-government-spies-are-behind-a-broad-hacking-campaign-that-has-breached-us-agencies-and-a-top-cyber-firm/2020/12/13/d5a53b88-3d7d-11eb-9453-fc36ba051781_story.html https://www.washingtonpost.com/national-security/russian-gov...
[2]: https://twitter.com/Bing_Chris/status/1338233592347045892 https://twitter.com/Bing_Chris/status/1338233592347045892
- heartbreak 6y agoHere’s the FireEye write up: https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html https://www.fireeye.com/blog/threat-research/2020/12/evasive...