Thursday’s comments were the most detailed yet from the agency since reports of the hack emerged over the weekend. The US government on Wednesday confirmed that an operation by elite hackers affected its networks and said the attack was “significant and ongoing”.
The true scale of the breach is still unknown, but looks to have extended beyond the US government. On Thursday, Reuters reported that Microsoft was also hacked as part of the suspected Russian campaign, according to people familiar with the matter.
Hackers believed to be working for Russia introduced malware into SolarWind’s popular network safety tool called Orion, which is used by numerous government agencies and large corporations.