ZDNet

Supernova malware clues link Chinese threat group Spiral to SolarWinds server hacks

On Monday, Secureworks' counter threat unit (CTU) said that during late 2020, a compromised Internet-facing SolarWinds server was used as a springboard to deploy Supernova, a .NET web shell. Similar ...
techtarget

CISA Ties SUPERNOVA Malware to Pulse Secure, SolarWinds Exploits

The Department of Homeland Security Cybersecurity and Infrastructure Security Agency released a report on the relatively new malware variant known as SUPERNOVA, which ties the threat to both ...
CRN

Hackers Exploit SolarWinds, Pulse Secure For Credential Theft: Feds

Hackers entered the unidentified victim’s network through a Pulse Secure VPN appliance, moved laterally to the victim’s SolarWinds Orion sever, installed Supernova malware, and stole credentials, ...
Threatpost

Malwarebytes Hit by SolarWinds Attackers

The attack vector was not the Orion platform but rather an email-protection application for Microsoft 365. Malwarebytes is the latest discovered victim of the SolarWinds hackers, the security company ...
bankinfosecurity

Researchers Describe a Second, Separate SolarWinds Attack

Russian hackers apparently weren't the only ones targeting SolarWinds customers. An attack last year by the Spiral hacking group, believed to be based in China, against one organization used ...
macobserver

CISA Tells Federal Agencies to Update SolarWinds Software ASAP

In the wake of the SolarWinds cyber attack on the U.S. government, the US Cybersecurity and Infrastructure Security Agency (CISA) urges agencies to update their SolarWinds Orion software by the end of ...
CRN

CrowdStrike Fends Off Attack Attempted By SolarWinds Hackers

The suspected Russian hackers behind the massive SolarWinds attack attempted to hack CrowdStrike through a Microsoft reseller’s Azure account but were ultimately unsuccessful, CrowdStrike says. The ...