3 ms·
It strongly implies that the vendor was thoroughly compromised, in order to insert backdoors into their software (possibly amongst other attacker actions).
by jeffmcjunkin 6y ago
It strongly implies that the vendor was thoroughly compromised, in order to insert backdoors into their software (possibly amongst other attacker actions).
- tootie 6y agoYeah, seems like a buried lede. SolarWinds was owned pretty badly and the attack that lead to that isn't described. Once they had access they have free reign to send malware to any one of their clients masquerading as routine patches. Sounds like they went the extra mile to deliver an extremely subtle exploit to avoid detection.
- jiveturkey 6y agoironic that you spelled ‘lede’ correctly but not ‘led’
- dxdm 6y agoAre you the guy doing youtube vids on submarine stuff? I like those, but it's unexpected to find you here, snarking over people's spelling. If you're not the guy, I recommend looking him up if you're interested in this sort of thing, it's a nice way to spend time online. :)
- deleted 6y ago[deleted]
- jiveturkey 6y agoare you the righteous indignation police? sometimes a simple “i found it amusing/ironic/delightful/serendipitous “ comment is just that, you know. i’m not sure why you think my comment was snarky, or holier than thou, or worthy of a criticism. the sub guy was amusing. as my own comment was intended. i’m honored by the comparison.
- rblatz 6y agoI bet the 2 week waiting period was to avoid detection in the solarwinds QA environment.