3 ms·
I discussed this in a video I made on the SolarWinds compromise if anyone is interested - https://youtu.be/ONd0ERCUy0k?t=760 https://youtu.be/ONd0ERCUy0k?t=760
by vesche 6y ago
I discussed this in a video I made on the SolarWinds compromise if anyone is interested - https://youtu.be/ONd0ERCUy0k?t=760 https://youtu.be/ONd0ERCUy0k?t=760
Original Tweet came from @vinodsparrow - https://twitter.com/vinodsparrow/status/1338431183588188160 https://twitter.com/vinodsparrow/status/1338431183588188160
Keep in mind the binary files that contained the backdoor were digitally signed by SolarWinds after being tampered with. So this FTP credential leak might be part of the supply chain compromise, but is not the whole enchilada.