supply chain attacks
Upstream software poisoning
A supply chain attack compromises software or hardware by targeting a trusted vendor or component rather than attacking the end user directly.
Instead of breaching a company's defenses, attackers infiltrate a supplier whose code or products that company depends on: The SolarWinds supply chain attack affected thousands of organizations through a single compromised software update.
The technique exploits the trust relationships between organizations and their suppliers, making detection difficult because the malicious code arrives through legitimate channels.
- malwareHarmful computer programs
- backdoorHidden bypass mechanism
- compromiseAgreement through mutual sacrifice
- infiltrationCovert entry into organization
- vendorOne who sells goods
software · dependency · open source · package · repository · injection · tampering · breach · zero day · hacker · payload · code · trust · third-party · upstream · pipeline · build · artifact
supply chain attacksfrontal assault
Attack from the front
perimeter breach · brute force attack · network intrusion · social engineering
supply, chain, attack, supplies, supplied, supplying, supplier, suppliers, chains