3 ms·
This is in regards to the SUNBURST malware delivered via SolarWinds' Orion platform. I like the Qualys blog for a detailed technical analysis: https://blog.qual
by AftHurrahWinch 2y ago
This is in regards to the SUNBURST malware delivered via SolarWinds' Orion platform. I like the Qualys blog for a detailed technical analysis: https://blog.qualys.com/vulnerabilities-threat-research/2021/01/04/technical-deep-dive-into-solarwinds-breach https://blog.qualys.com/vulnerabilities-threat-research/2021...
- Thorrez 2y agoI think that was the entrypoint. But I think the ProPublica article wants more research into the weakness in Microsoft's default (at the time) Active Directory settings that allowed lateral movement, as described in https://www.propublica.org/article/microsoft-solarwinds-golden-saml-data-breach-russian-hackers https://www.propublica.org/article/microsoft-solarwinds-gold...
- m3047 2y agoActually it's a rabbit hole to wander around in. But only if you know. IYKYK.