SolarWinds hack ‘carried out from within US’
But Russian actors are reportedly still to blame
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
The latest evidence from the investigation into theSolarWindshack suggests that the attack was carried out from within the US - but it is still believed that Russia was ultimately responsible for the cyberattack.
In a press briefing, Deputy National Security Advisor Anne Neuberger explained that the investigation into the SolarWinds hack was still in its “beginning stages.” Since the attack came to light in December last year, more information has come to light gradually. As well as multiple private companies being affected, nine federal agencies were also compromised.
Although it is not currently clear how the SolarWinds attack was carried out, Neuberger was able to confirm that it was launched from within the US. It has been suggested that a domestic attack may have made it more difficult for US cybersecurity teams to identify the hack, as they often focus on international threats.
The investigation continues
The SolarWinds hack has been called the “largest and most sophisticated attack the world has ever seen.” The breach involved SolarWinds Orionnetwork monitoringsoftware, which is used by an estimated 18,000 customers. Among these, it is believed that a smaller number of targets were subjected to follow-up intrusions.
Among the most worrying developments is the number of government agencies that have fallen victim to the SolarWinds hack. Although not all of the names of the affected government bureaus have been shared, it is known that the US Department of Energy and the National Nuclear Security Administration were both targeted.
Among more recent revelations concerning the hack, it was revealed that thousands ofsoftware developerswere likely to have been involved and that 4,032lines of codewere used. With the investigation ongoing, it is likely that further disclosures will be forthcoming soon.
ViaBloomberg
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services. After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things.
Phishing attacks surge in 2024 as cybercriminals adopt AI tools and multi-channel tactics
This new phishing strategy utilizes GitHub comments to distribute malware
Arcane season 2 finally gave us the huge Caitlyn and Vi moment we’ve been waiting for – and its creators say ‘we couldn’t have done it in season one’