3 ms·
Stuxnet was also a supply chain attack. The first infections were at Foolad Technic and Behpajooh, a pair of privately owned engineering firms. The malware kee
by mike_d 6y ago
Stuxnet was also a supply chain attack. The first infections were at Foolad Technic and Behpajooh, a pair of privately owned engineering firms.
The malware keeps a "breadcrumb" trail of each machine it infects, and based on investigations by Symantec [1] it was determined that every Stuxnet sample from Natanz originated from outside suppliers.
1. https://tinyurl.com/1eswo98i https://tinyurl.com/1eswo98i
- 1MachineElf 6y agoRelated to Stuxnet, I'd say the Equation Group's presence on hard drive firmware was/is the most sophisticated supply chain attack ever: https://en.wikipedia.org/wiki/Equation_Group#Firmware https://en.wikipedia.org/wiki/Equation_Group#Firmware
- nyolfen 6y agoin the NSA ANT catalog, writing backdoored HDD firmware was literally an intern project