Sunburst backdoor – code overlaps with Kazuar
SecureList
JANUARY 11, 2021
On December 13, 2020, FireEye published a blog post detailing a supply chain attack leveraging Orion IT, an infrastructure monitoring and management platform by SolarWinds. While looking at the Sunburst backdoor, we discovered several features that overlap with a previously identified backdoor known as Kazuar. Background.
65 
Let's personalize your content