While SUNBURST activity was only identified in December 2020, analysis of campaign details and further analysis of SolarWinds software indicates the event may have started, at least in preparatory phases, over a year prior.

An investigation conducted by threat intelligence firm ReversingLabs showed that the first version of the Orion software modified by the hackers was actually from October 2019.

ReversingLabs discloses compilation artifacts confirming that Orion source code was directly modified to include a malicious backdoor

The source code of the affected library was directly modified to include malicious backdoor code

The hacking group behind an Android spyware variant has added fresh capabilities, including the ability to snoop on private chats on Skype, Instagram and WhatsApp

The developers behind the Android malware have a new variant that spies on instant messages in WhatsApp, Telegram, Skype and more. Learn more here.