https://www.reuters.com/article/us-usa- ... SKBN28N0PGHackers believed to be working for Russia have been monitoring internal email traffic at the U.S. Treasury and Commerce departments, according to people familiar with the matter, adding they feared the hacks uncovered so far may be the tip of the iceberg.
Not sure how they managed to publish the hacked patch on the SolarWind web-site. Wasn't that the original starting point?Marmot писал(а): ↑13 дек 2020, 21:39https://www.reuters.com/article/us-usa- ... SKBN28N0PGHackers believed to be working for Russia have been monitoring internal email traffic at the U.S. Treasury and Commerce departments, according to people familiar with the matter, adding they feared the hacks uncovered so far may be the tip of the iceberg.
А тут некоторые технические подробности:
https://www.fireeye.com/blog/threat-res ... kdoor.html
Я так понял, что на данный момент, никто кроме самих хакеров не знает, как они это сделали...
"We have yet to even understand how big the damage assessment will be. But I guarantee you, by the time it's done, it will be far worse than what we think it is right now because we still haven't uncovered all of the people who have been attacked by this campaign,"
