Solarwinds, a network and security tools supplier announced in mid-December 2020 that their Orion software tools was compromised by malware and made into a trojan. The original breach has been confirmed by Solarwinds to have occurred in September 2019. Orion suite of tools is used by many corporate and government organisations globally.
attackers gained access to an extraordinary array of potential targets in the US alone: more than 425 of the Fortune 500 list
Eavesdropping of the US Treasury and commerce departments has been confirmed.
Mimecast provide email services and email security services and they announced in Mid-January 2021 that they'd suffered a breach.
Similar modi operandi were used in both attacks
How did they do it?
The attackers compromised Microsoft 365 security certificates used to authenticate Microsoft 365 Exchange Web Services.
They studied and learnt how their quarry operated and carefully inserted their own code into libraries so that it'll be incorporated into new software and
Personal commentary. Views are the author’s own.