Live Breaking News & Updates on Softwaredistribution Eventcachemanager

December 18, 2020
Analyzing Solorigate, the compromised DLL file that started a sophisticated cyberattack, and how Microsoft Defender helps protect customers
Microsoft 365 Defender Research Team
Microsoft Threat Intelligence Center (MSTIC)
Share
UPDATE: Microsoft continues to work with partners and customers to expand our knowledge of the threat actor behind the nation-state cyberattacks that compromised the supply chain of SolarWinds and impacted multiple other organizations. Microsoft previously used ‘Solorigate’ as the primary designation for the actor, but moving forward, we want to place appropriate focus on the actors behind the sophisticated attacks, rather than one of the examples of malware used by the actors. Microsoft Threat Intelligence Center (MSTIC) has named the actor behind the attack against SolarWinds, the SUNBURST backdoor, TEARDROP malware, and related components as NOBELIUM. As we release new content and analysis, we wi ....

Solarwinds Orion , Gettask Eventcachemanager , Responseand Additionalfields , Businesslayer Backgroundinventory Inventorymanager , Solarwinds Businesslayerhost , Identityserver Servicehost , Softwaredistribution Eventcachemanager , Solorigate Adha , Softwareprotectionplatform Eventcachemanager , Comobject Schedule Service , Microsoft Defender Security Center , Solarwinds Orion Platform , Solarwinds Orion Core Businesslayer , Microsoft Defender , Orionimprovementbusinesslayer Initialize , Background Inventory , Computer Domain , Settings Executiontimelimit , Cobalt Strike , Microsoft Defender Endpoint , Defender Antivirus , Winds Malicious , Winds Compromised , Active Directory , Winds Businesslayerhost , Vulnerability Management ,