This is a technique with a storied history including the Sandworm’s NotPetya attack and the SolarWinds compromise. Mitigations and detections can be especially difficult for defenders but patch management, vulnerability scanning, and verification of distributed binaries all play crucial roles.

0 likes 1 replies