The US government has officially accused Russia of attacking SolarWinds and its clients and has imposed sanctions on a number of Russian companies. Joe Biden’s administration claims that the Russian Foreign Intelligence Service and its “government hackers” known as APT 29, Cozy Bear or The Dukes were behind the attack.

According to the authorities, they “used the SolarWinds Orion platform and other IT infrastructures as part of a large-scale cyber-espionage campaign.”

“Compromise of the SolarWinds’ supply chain by Russian Foreign Intelligence Service has enabled them to spy on and potentially disrupt more than 16,000 computer systems [...]

Cybersecurity media report that attackers hacked the information security company Qualys through the file-sharing service Accellion FTA. Since December 2020, information security experts have been recording attacks on companies and organizations using the outdated Accellion FTA (File Transfer Application) service.

FireEye analysts linked this activity to the FIN11 hacker group and warned that more than 100 companies had already become victims of cybercriminals.

“Among the approximately 300 FTA clients, fewer than 100 have been targeted by attacks, and less than 25 have been affected by data theft”, – said in Accellion.

FireEye clarified that some of [...]

As expected, the list of companies that have become victims of the SolarWinds attack continues to grow with new names. It turned out that the high-profile attack on the supply chain affected the companies Mimecast, Palo Alto Networks, Qualys and Fidelis Cybersecurity. [dropcap]L[/dropcap]et me remind you that the attack on SolarWinds is attributed to a supposedly Russian-speaking hack group, which information security experts track under the names StellarParticle (CrowdStrike), UNC2452 (FireEye), and Dark Halo (Volexity).

In December 2020, it became known that unknown hackers had attacked SolarWinds and infected its Orion platform with malware.

Of the 300,000 SolarWinds [...]