They used a sophisticated injection source for inserting the SUNBURST malicious code into the Orion Platform software. 12th September 2019 : Hackers injected the test code and performed a trial run.4th September 2019 : Hackers accessed SolarWinds.Here is the list of major events associated with the SolarWinds Hack: (Source: Ars Technica) When Did Everything Happen? Many other NGOs and Fortune 500 companies also fell victim to the breach. A reputable cyber security company, FireEye, is the first known victim of this breach and was also responsible for disclosing the attack in December 2020. SolarWinds Orion Platform Version 2020.2Įven several government departments in the US such as Homeland Security, Commerce, State and Treasury were affected by this breach.SolarWinds Orion Platform Version 2019.4 HF 5.SolarWinds Orion Platform Version 2020.2 HF 1.According to an SEC filing by SolarWinds, around 18,000 of its customers were using the vulnerable versions of the Orion platform, which include: Multiple government agencies and commercial industry verticals around the world were affected by the infamous SolarWinds hack.

The hackers used this hidden code to access the IT systems of SolarWinds customers, using them to install even more malware. More than 18,000 customers of the company installed the update, allowing the malware to spread undetected. The hackers installed this malicious code into a new batch of software, which was sent out to customers by SolarWinds as an update at the beginning of March 2020. The malware was capable of accessing system files and seamlessly blending in with legitimate SolarWinds activity without being detected. Due to the addition of this malicious code, the SolarWinds Orion Platform created a backdoor that allowed the hackers to access accounts and impersonate users of victim organizations. The hackers inserted malicious code into the Orion network management system, which was used by numerous government agencies and multinational companies globally. Through this hack, the threat actors gained access to the systems, data and networks of thousands of SolarWinds customers who were using the Orion network management system for managing their IT resources. The breach occurred through the company’s IT performance monitoring system called Orion. Considered as the biggest data breach of the 21st century, the SolarWinds attack has successfully made its place among the world-shaking events of the decade.

SolarWinds is a prominent software company that provides thousands of organizations worldwide with numerous technical services and system management tools for infrastructure and network monitoring.

Solarwinds supply chain attack