News for hackers. Stuff that matters.

A comment on SolarWinds leaked FTP credentials through a public GitHub repo since 2018. Parent comment

Re:SolarWinds leaked FTP credentials through a public GitHub... by hackerpain on Wednesday December 16, 2020 @09:26AM (#25442823)
The news and press defined the "attack sophistication". An attack of this scale definitely needs some amount of sophistication but on a difficulty scale of 1-10 to infiltrate their network, I would rate it a humble 0.5/10.
[ Parent | on HN ]
Re:SolarWinds leaked FTP credentials through a public GitHub... by ceejayoz on Wednesday December 16, 2020 @09:57AM (#25443247)
Don't blame the press on this; the "sophisticated hack" wording comes directly from SolarWinds.

https://www.solarwinds.com/securityadvisory

> We have been advised that this incident was likely the result of a highly sophisticated, targeted, and manual supply chain attack by an outside nation state...

[ Parent | on HN ]
Re:SolarWinds leaked FTP credentials through a public GitHub... by hackerpain on Wednesday December 16, 2020 @10:00AM (#25443299)
> We have been advised

Their advisor was smart enough to call it so.

[ Parent | on HN ]