Possible successor to Sunburst: Tomiris backdoor
Tomiris backdoor: Possibly new activity by the threat actor behind the sunburst attack. While investigating an as yet unknown Advanced Persistence Threat (APT), Kaspersky researchers identified a new piece of malware that has several important attributes that potentially indicate a connection to the DarkHalo threat actor responsible for the sunburst attack. This is one of the most impactful supply chain attacks in recent years. The Sunburst security incident hit the headlines in December 2020: threat actor DarkHalo compromised a well-known enterprise software provider and used its infrastructure to spread spyware under the guise of legitimate software updates. After that, the actor seemed to have disappeared ...