Cyber Threat Analysis Report: Solarwinds Compromise
Date: 22 June 2023

• Solargate
• Sunburst
• FireEye

• Orion tool
  • Flaws
  • Foothold
  • Escalation

• Timeline
  • Sep 2019: Assessment, code injection tests
  • Nov 2020: Injection testing ceases
  • Feb 2020: Backdoor compiled and deployed
  • Mar 2020: Estimated distribution of backdoor
  • May 2020: Estimated start of hands key attacks
  • June 2020: Malware removed from build environment
  • Dec 2020: Supply chain attack disclosed

1000 or more users conducting this exploit.