An attack on the supply chain consists of compromising digital providers of external services such as: Internet service providers, Telecommunications providers, Software providers, External service providers, Hardware providers, etc. With the aim of infiltrating a target organization from there.<\/p>\n\n\n\n
Attackers look for insecure network protocols, unprotected server infrastructures, and insecure encryption practices. They go in, change the source codes, and hide the malware in the build and update processes. Because the software is created and released by trusted vendors, these applications and updates are signed and certified. In attacks on the software supply chain, vendors may not be aware that their applications or updates are infected with malicious code when they are released to the public. The malicious code is then executed with the same trust and the same permissions as the application.<\/p>\n\n\n\n
A clear example of this type of attack is the one suffered by SolarWinds, since a group of hackers compromised the software provider SolarWinds, managing to implement an update with Sunburst malware for its well-known network monitoring application Orion. In this way, they could infect the networks of the companies or institutions where it is deployed.<\/p>\n\n\n\n
This type of attack has several ways of attacking each one in a different way, such as:<\/p>\n\n\n\n
\u25b8Compromised specialized code sent to hardware or firmware components<\/em><\/strong><\/p>\n\n\n\n \u25b8Compromised software creation tools or up-to-date infrastructure<\/em><\/strong><\/p>\n\n\n\n \u25b8Malware pre-installed on devices like: USB, phones, printers, etc.<\/em><\/strong><\/p>\n\n\n\n \u25b8Stolen code signing certificates or malicious applications signed using the identity of the development company<\/em><\/strong><\/p>\n\n\n\n Other reads: An attack on the supply chain consists of compromising digital providers of external services such as: Internet service providers, Telecommunications providers, Software providers, External service providers, Hardware providers, etc. With the aim of infiltrating a target organization from there. Attackers look for insecure network protocols, unprotected server infrastructures, and insecure encryption practices. They go in, […]<\/p>\n","protected":false},"author":1,"featured_media":2113,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[10],"tags":[36],"class_list":["post-2112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cybersecurity"],"yoast_head":"\n
The steps of the Cyber Kill Chain and what is it?<\/a>
Phobos \u2013 A serious threat for working enterprises<\/a>
<\/p>\n","protected":false},"excerpt":{"rendered":"