Security News > 2021 > February > China-Linked Hackers Exploited SolarWinds Flaw in U.S. Government Attack: Report
Hackers believed to be from China have exploited a vulnerability in a SolarWinds product as part of a campaign targeting at least one U.S. government agency, Reuters reported on Tuesday.
In late December, a few weeks after it came to light that Texas-based IT management solutions provider SolarWinds was targeted in a sophisticated supply chain attack, researchers from several organizations revealed that one of the pieces of malware they had analyzed, dubbed Supernova, had apparently been used by a second group that was not related to the supply chain attack.
The supply chain attack, which has been linked to Russian threat actors, involved a breach of SolarWinds systems and the delivery of malware through updates for the company's Orion monitoring product.
SolarWinds patched the vulnerability involved in the Supernova attack in December.
SolarWinds told Reuters that it's only aware of a single customer being targeted with the Supernova malware, but it did not name the customer and said it could not conclusively determine who was behind the attack.
While SolarWinds enabled hackers to gain access to the systems of many organizations through the supply chain attack, the U.S. Cybersecurity and Infrastructure Security Agency reported recently that many of the entities targeted by this threat actor actually had no direct link to SolarWinds - roughly 30% of identified victims did not use the company's products.
News URL
Related news
- North Korean govt hackers linked to Play ransomware attack (source)
- China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks (source)
- Hackers increasingly use Winos4.0 post-exploitation kit in attacks (source)
- China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait (source)
- Halliburton reports $35 million loss after ransomware attack (source)
- Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks (source)
- Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations (source)
- T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears (source)
- China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks (source)
- Hackers breach US firm over Wi-Fi from Russia in 'Nearest Neighbor Attack' (source)