value:  Sandworm Team has distributed NotPetya by compromising the legitimate Ukrainian accounting software M.E.Doc and replacing a legitimate software update with a malicious one. ;; SUNSPOT malware was designed and used to insert SUNBURST into software builds of the SolarWinds Orion IT management product. ;; UNC2452 gained initial network access via a trojanized update of SolarWinds Orion software.
name: Supply Chain Compromise: Compromise Software Supply Chain