Sunturai
Threat report

www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html
Published on
www.fireeye.com
Sources in this catalogue
2

ATT&CK techniques those detections carry

  • T1055Process Injection
  • T1071Application Layer Protocol
  • T1071.001Web Protocols
  • T1195Supply Chain Compromise
  • T1195.002Compromise Software Supply Chain
Open the original

2 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Deprecated - SUNBURST Command and Control ActivityHigh
Malicious Named Pipe CreatedCritical

Showing 2 of 2

Filter in the catalogue

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice