ECONOMY & WORK
MONEY 101
NEWS
PERSONAL FINANCE
NET WORTH
About Us Contact Us Privacy Policy Terms of Use DMCA Opt-out of personalized ads
© Copyright 2023 Market Realist. Market Realist is a registered trademark. All Rights Reserved. People may receive compensation for some links to products and services on this website. Offers may be subject to change without notice.
MARKETREALIST.COM / NEWS

SEC Sues IT Firm SolarWinds Over One of the Worst Cyber Espionage Hacks in US History; Here's Why

The cyberattack was allegedly carried out by a group of Russian hackers called "NOBELIUM".
PUBLISHED NOV 27, 2023
Image source: Getty Images | Photo by Chip Somodevilla
Image source: Getty Images | Photo by Chip Somodevilla

US regulators have sued IT firm SolarWinds, which was targeted by a Russian-backed hacking group in a cyberespionage campaign, for fraud and failure to disclose alleged security deficiencies. The stunning hack was one of the largest cyberattacks in the US history, which compromised the data of several companies and government agencies. The suit also named the company’s top security executive while seeking his removal, unspecified civil penalties, and reimbursement of “ill-gotten gains”.



 

SolarWinds is a major IT/software company based in Austin, Texas. It provides system management tools for network and infrastructure monitoring, along with technical services to hundreds of thousands of organizations around the world. One of the company's products is an IT performance monitoring system called Orion which was the primary target of the hack.



 

As an IT monitoring system, SolarWinds Orion had privileged access to the IT systems of several companies and government agencies. Thus its wide deployment made it a lucrative and attractive target. In the attack, the hackers used a method called a ‘supply chain attack’ to insert malicious code into the Orion system. In this type of attack, a third party with access to various organizations' systems is targeted by focusing on weaker links in the organization's supply chain.

In this case, the SolarWinds Orion platform created a backdoor for hackers who impersonated users and accounts of victim organizations. The malware can also allow access to system files without detection, even by an antivirus software. In the hack, the attackers gained access to the networks, systems, and data of thousands of SolarWinds Orion customers.

Photo illustration, of a hacker with an Anonymous mask on his face | Getty Images | Photo by Chesnot
Getty Images | Photo by Chesnot

In this hack, Microsoft has suspected the hackers to be from the group known as NOBELIUM. Microsoft refers to the group as an advanced and persistent adversary because of its tenacious attacks and ever-evolving nature.

Representative image of a protestor wearing a mask of 'Anonymous' | Getty Images | Photo by Denis Doyle
Representative image of a protestor wearing a mask of 'Anonymous' | Getty Images | Photo by Denis Doyle

In the attack, the data, networks, and systems of over 30,000 public and private organizations were compromised, as per Fortune. The victims included state and federal agencies including, the Justice and Homeland Security departments. Apart from SolarWinds clients, the hack exposed the inner workings of Orion users, and the hackers could potentially gain access to the data and networks of their customers and partners as well.

In the 68-page complaint filed in New York federal court, the SEC has accused SolarWinds and its then vice president of security, Tim Brown, of defrauding their investors and customers. The SEC has accused them of making “misstatements, omissions and schemes” that concealed their “poor cybersecurity practices and its heightened and increasing cybersecurity risks," as per the official release

Gurbir S. Grewal, the SEC’s enforcement division director, said in a statement that SolarWinds and Brown ignored “repeated red flags” for years and deprived investors of accurate material information.

 Gurbir Grewal, Director of Enforcement for the Securities and Exchange Commission, speaks during a press conference | Getty Images | Photo by Michael M. Santiago
Gurbir Grewal, Director of Enforcement for the Securities and Exchange Commission, speaks during a press conference | Getty Images | Photo by Michael M. Santiago

The SEC also alleged that an internal SolarWinds presentation shared in 2020 had warned about the company’s network being “not very secure,” and vulnerable to hacking that could lead to “major reputation and financial loss,” the release said.  The SEC also alleged that many employees including Brown had made multiple communications questioning the company’s ability to protect itself from cyberattacks.

Meanwhile, SolarWinds has called the SEC charges unfounded and said it is “deeply concerned this action will put our national security at risk,” a Fortune report said.

MORE ON MARKET REALIST
The guest, who found the item online, didn't think it was the real deal until he heard its value.
14 hours ago
The player Samantha secured the first big win of Ryan Seacrest's run on the show.
17 hours ago
The sisters wanted to keep their father's legacy alive, but also had their careers to focus on.
19 hours ago
The shopper noticed that the watermelon which she bought three days ago was deflated.
20 hours ago
The guest couldn't believe that her collection was worth so much money.
1 day ago
While all the Sharks were out, Mark Cuban saw the potential in "Garage Celebrations."
2 days ago
The loss was ironic as the retired teacher coulnd't get a phrase commonly used in classrooms.
2 days ago
The recalls were issued for a range of products including tires, air conditioners and power banks.
2 days ago
The guest who got the item as a gift from a neighbor had little to no idea about its significance.
2 days ago
Harrison got a good deal for the fossil although it wasn't what he had thought.
3 days ago
The player, Beth Barbee left everyone in the dust with her impressive puzzle solving skills.
3 days ago
Given her celebrity status, Harrison cut her some slack in the negotiations.
3 days ago
The deal ultimately fell apart as the seller, Scotty was looking to get $375,000.
4 days ago
The guest was blown away by the six-figure appraisal for his father's John Falter illustration.
4 days ago
Harvey just couldn't believe that the contestant could come up with an answer like that.
5 days ago
Antoinette's win was even more special because she needed a car more than anything at that point.
5 days ago
The player, Catrice Sandt, nearly blew the Bonus Round puzzle by saying too many words in the end.
6 days ago
The co-founders of Nature's Wild Berry left the Sharks in shock with their miraculous product.
6 days ago
The contestant named Whitney could barely control her emotions as she celebrated with Ryan Seacrest.
6 days ago
The player named Kathy Young missed out on the Showcase Showdown as she had to leave.
7 days ago