"Solarwinds123": Hacked IT Company Used Weak Password, While Backdoor Access Peddled On Underground Forums

"Solarwinds123": Hacked IT Company Used Weak Password, While Backdo...


Tyler Durden's Photo
BY TYLER DURDEN
WEDNESDAY, DEC 16, 2020 - 10:00

Hacked Texas-based IT infrastructure provider SolarWinds was warned over weak password security last year, after security researcher Vinoth Kumar discovered that the company used "solarwinds123" to protect their update server.

"This could have been done by any attacker, easily," said Kumar, according to Reuters.

On Monday, SolarWinds confirmed that their flagship network management software, Orion, was the target of an international cyberespionage operation which the Washington Post pinned on government-backed Russian hackers - who inserted malicious code into Orion software updates and pushed it out to almost 18,000 customers. 

The malicious updates - sent between March and June, when America was hunkering down to weather the first wave of coronavirus infections - was “perfect timing for a perfect storm,” said Kim Peretti, who co-chairs Atlanta-based law firm Alston & Bird’s cybersecurity preparedness and response team.

Assessing the damage would be difficult, she said.

We may not know the true impact for many months, if not more – if not ever,” she said. -Reuters

Included in the breach were the US Treasury, the Commerce Department's National Telecommunications and Information Administration (NTIA) and other government agencies.

Meanwhile, Reuters also reports that "multiple criminals have offered to sell access to SolarWinds’ computers through underground forums, according to two researchers who separately had access to those forums."

One of those offering claimed access over the Exploit forum in 2017 was known as “fxmsp” and is wanted by the FBI “for involvement in several high-profile incidents,” said Mark Arena, chief executive of cybercrime intelligence firm Intel471. Arena informed his company’s clients, which include U.S. law enforcement agencies. -Reuters

According to the report, neither the weak password or the stolen access are considered the most likely source of the current intrusion, however Kyle Hanslovan, the cofounder of Maryland-based cybersecurity company Huntress, noticed days after the SolarWinds hack that malicious updates were still available for download.

Dominion?

On Monday, screenshots began floating around of Dominion Voting Systems with a solarwinds logo below a login screen, implying that the 2020 US election may have been compromised by hackers, as opposed to on purpose as Trump and his allies have claimed.

Journalist Kim Zetter, however, pointed out that while Dominion does or did use a SolarWinds product, it wasn't their Orion software which was compromised. 

The company's stock has fallen over 25% since Friday's price of $23.50, currently sitting below $18. The company announced on December 9 that CEO Kevin Thompson would be replaced after 11 years at the helm with Sudhakar Ramakrishna, the former CEO of Pulse Secure.

Views: 23

Comment

You need to be a member of 12160 Social Network to add comments!

Join 12160 Social Network

"Destroying the New World Order"

TOP CONTENT THIS WEEK

THANK YOU FOR SUPPORTING THE SITE!

mobile page

12160.info/m

12160 Administrators

 

Latest Activity

MAC posted videos
23 hours ago
tjdavis posted photos
yesterday
Doc Vega posted photos
yesterday
Doc Vega posted a blog post

Veteran’s Day a Time That Should Be Honored

 At a time in our confusing and idiotic history when a Democrat can’t define a woman when being…See More
yesterday
Michael A. Pinson posted a photo
yesterday
cheeki kea commented on tjdavis's blog post Mountain Miracle
"Thumbs up to this awesome school. Isn't it amazing that some of the greatest teachers are to…"
Sunday
cheeki kea commented on cheeki kea's photo
Sunday
cheeki kea commented on Doc Vega's blog post This is Incredible! Trump is Already releasing Plans to Dismantle the Deep State and Purge the Corrupt Players
"Oh wow he is not wasting any time. May the power of the words he just spoke resonate across America…"
Sunday
tjdavis favorited cheeki kea's video
Sunday
tjdavis favorited rlionhearted_3's photo
Sunday
tjdavis posted a blog post
Sunday
Doc Vega's 4 blog posts were featured
Saturday
cheeki kea's 2 blog posts were featured
Saturday
Doc Vega commented on tjdavis's blog post Mountain Miracle
"A creative way to get hands on participation with students and the community."
Saturday
Doc Vega favorited tjdavis's blog post Mountain Miracle
Saturday
Doc Vega posted a blog post

The Perfect Lies

The Perfect Lies Time is like an ocean with its secrets running deepLike all the lovers you’ve…See More
Saturday
tjdavis posted blog posts
Saturday
tjdavis posted a blog post
Friday
Doc Vega posted blog posts
Thursday
rlionhearted_3 posted a photo
Thursday

© 2024   Created by truth.   Powered by

Badges  |  Report an Issue  |  Terms of Service

content and site copyright 12160.info 2007-2019 - all rights reserved. unless otherwise noted