Active Exploitation of SolarWinds Software
NJCCIC Alert
Original Release Date: 12/13/2020
Summary
The Cybersecurity and Infrastructure Security Agency (CISA) is aware of active exploitation of SolarWinds Orion Platform software versions 2019.4 through 2020.2.1, released between March 2020 and June 2020.
Affected organizations are encouraged to read the SolarWinds and FireEye advisories for more information and FireEye’s GitHub page for detection countermeasures:
- SolarWinds Security Advisory
- FireEye Advisory: Highly Evasive Attacker Leverages SolarWinds Supply Chain to Compromise Multiple Global Victims With SUNBURST Backdoor
- FireEye GitHub page: Sunburst Countermeasures
Reporting
We encourage recipients who discover signs of malicious cyber activity to contact us via the cyber incident report form found here.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.