One Article Review
| Source |  Anomali |
|---|---|
| Identifiant | 2134714 |
| Date de publication | 2020-12-29 20:12:00 (vue: 2020-12-29 22:05:12) |
| Titre | Anomali ThreatStream Sunburst Backdoor Custom Dashboard Provides Machine Readable IOCs Related To SolarWinds Supply Chain Attack |
| Texte | SolarWinds, a provider of IT management and monitoring software deployed by thousands of global customers, was breached between March and June of 2020 by an Advanced Persistent Threat (APT) that cybersecurity company FireEye is tracking as UNC2452. As part of the supply chain attack, the APT compromised the company’s Orion business software with trojanized malware known as Sunburst, which opens a backdoor into the networks of customers who executed Orion updates.
Immediately following news of the attack, Anomali Threat Research launched a custom threat intelligence dashboard called Sunburst Backdoor. Now available to Anomali ThreatStream customers, the dashboard is accessible via the user console. It is preconfigured to provide immediate access and visibility into all known Sunburst Backdoor indicators of compromise (IOCs) that are made available through commercial and open-source threat feeds that users manage on ThreatStream.
Customers using ThreatStream, Anomali Match, and Anomali Lens can immediately detect any IOCs present in their environments, quickly consume threat bulletins containing machine readable IOCs to operationalize threat intelligence across their security infrastructures, and communicate to all stakeholders how they have been impacted.
As part of ongoing product enhancements that further automate and speed essential tasks performed by threat intelligence and security operations analysts, Anomali recently added thematic dashboards that respond to significant global events. In addition to Sunburst Backdoor, ThreatStream customers currently have access to additional dashboards announced as part of our December quarterly product release.
Customers can integrate Sunburst Backdoor and other dashboards via the “+ Add Dashboard” tab in the ThreatStream console:
After integration, users will have immediate access to the Sunburst Backdoor dashboard, which continually updates IOCs as they become available:
Organizations interested in learning more about Anomali ThreatStream and our custom dashboard capabilities can request a demo here.
For organizations interested in gaining wider visibility and detection capabilities for the Sunburst cyberattack, Anomali Threat Research has compiled and curated an initial threat bulletin and downloadable set of OSINT IOCs available here. |
| Envoyé | Oui |
| Condensat | “+ 2020 about access accessible across add added addition additional advanced after all analysts announced anomali any apt are attack automate available available: backdoor become been between breached bulletin bulletins business called can capabilities chain commercial communicate company company’s compiled compromise compromised console console: consume containing continually curated currently custom customers cybersecurity dashboard dashboard” dashboards december demo deployed detect detection downloadable enhancements environments essential events executed feeds fireeye following further gaining global has have here how immediate immediately impacted indicators infrastructures initial integrate integration intelligence interested iocs june known launched learning lens machine made malware manage management march match monitoring more networks news now ongoing open opens operationalize operations organizations orion osint other part performed persistent preconfigured present product provide provider provides quarterly quickly readable recently related release request research respond security set significant software solarwinds source speed stakeholders sunburst sunburst cyberattack supply tab tasks thematic thousands threat threatstream through tracking trojanized unc2452 updates user users using visibility which who wider will |
| Tags | Malware Threat Mobile |
| Stories | Solardwinds Solardwinds |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.