Case #003: The Key to the Kingdom
Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human
Target: Microsoft Date: January 2024 Threat Actor: Storm-0558 / Midnight Blizzard (Russian SVR) Attack Vector: Stolen Signing Key & Non-Human
Target: SolarWinds (and ~18,000 downstream customers) Date: December 2020 Threat Actor: APT29 / Cosy Bear / Nobelium (Russian SVR) Attack
Target: MGM Resorts International Date: September 2023 Threat Actor: Scattered Spider / ALPHV Attack Vector: Voice Phishing (Vishing) & MFA