SolarWinds hack 'carried out from within US'

Zero-day attack
(Image credit: Shutterstock.com)

The latest evidence from the investigation into the SolarWinds hack suggests that the attack was carried out from within the US - but it is still believed that Russia was ultimately responsible for the cyberattack.

In a press briefing, Deputy National Security Advisor Anne Neuberger explained that the investigation into the SolarWinds hack was still in its “beginning stages.” Since the attack came to light in December last year, more information has come to light gradually. As well as multiple private companies being affected, nine federal agencies were also compromised.  

Although it is not currently clear how the SolarWinds attack was carried out, Neuberger was able to confirm that it was launched from within the US. It has been suggested that a domestic attack may have made it more difficult for US cybersecurity teams to identify the hack, as they often focus on international threats.

The investigation continues

The SolarWinds hack has been called the “largest and most sophisticated attack the world has ever seen.” The breach involved SolarWinds Orion network monitoring software, which is used by an estimated 18,000 customers. Among these, it is believed that a smaller number of targets were subjected to follow-up intrusions.

Among the most worrying developments is the number of government agencies that have fallen victim to the SolarWinds hack. Although not all of the names of the affected government bureaus have been shared, it is known that the US Department of Energy and the National Nuclear Security Administration were both targeted.

Among more recent revelations concerning the hack, it was revealed that thousands of software developers were likely to have been involved and that 4,032 lines of code were used. With the investigation ongoing, it is likely that further disclosures will be forthcoming soon.

Via Bloomberg

TOPICS
Barclay Ballard

Barclay has been writing about technology for a decade, starting out as a freelancer with ITProPortal covering everything from London’s start-up scene to comparisons of the best cloud storage services.  After that, he spent some time as the managing editor of an online outlet focusing on cloud computing, furthering his interest in virtualization, Big Data, and the Internet of Things. 

Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
Ray-Ban Meta Smart Glasses
Samsung's rumored smart specs may be launching before the end of 2025
Apple iPhone 16 Review
The latest iPhone 18 leak hints at a major chipset upgrade for all four models
Quordle on a smartphone held in a hand
Quordle hints and answers for Monday, March 24 (game #1155)
NYT Strands homescreen on a mobile phone screen, on a light blue background
NYT Strands hints and answers for Monday, March 24 (game #386)
NYT Connections homescreen on a phone, on a purple background
NYT Connections hints and answers for Monday, March 24 (game #652)
Quordle on a smartphone held in a hand
Quordle hints and answers for Sunday, March 23 (game #1154)