SolarWinds
The 2020 SolarWinds cyber attack was a sophisticated, Russian-aligned supply chain attack where hackers inserted malicious code (SUNBURST) into SolarWinds Orion software updates. This allowed unauthorized access to roughly 18,000 customers, including US government agencies and Fortune 500 companies, enabling espionage and data theft.
-
In early 2020, a routine software update for SolarWinds’ Orion contained hidden malware, SUNBURST, leading to a global cyber-espionage campaign. Discovered by FireEye in December 2020, the breach highlighted vulnerabilities in trust and supply chains, with attackers, linked to Russian intelligence, exploiting a single vendor to access numerous networks for strategic data gathering.
Chronicles of Compromise 