{"product_id":"solarwinds-sunburst-shirt-2020-supply-chain-attack-graphic-tee-unhacked","title":"EXHIBIT 0016 — SUNBURST","description":"\u003cp\u003eNobody committed a backdoor. It was inserted while the code was being compiled.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eAn implant later named SUNSPOT sat on a SolarWinds build server through the first half of 2020 and waited. When it saw MsBuild.exe begin a build of the Orion Platform, it swapped out one source file, let the compiler run against the substitute, and put the original back before anyone came looking.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eWhat came off the end of that build was SolarWinds.Orion.Core.BusinessLayer.dll, signed with the SolarWinds certificate and shipped down the SolarWinds update channel. Every signature check on every customer machine passed, because every part of it was authentic except the contents.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe backdoor then did nothing at all for twelve to fourteen days. Only after that did it resolve a subdomain of avsvmcloud.com, generated from the victim domain name, and wait to be told whether it was worth anyone's time.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eRoughly 18,000 organizations installed a trojanized Orion update between March and June 2020. Fewer than a hundred were ever followed up on. The rest were cover.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eNo scanner found it. Mandiant noticed that one of its own employees had a second device registered for multi-factor authentication, pulled on that thread, and went public on 13 December 2020.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eWhat gets repeated about it is supply chain risk in general. The narrower point is harder: every control in the chain did its job. The code review passed. The repository was clean. The signature was valid. The vendor was real.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eThe attack was never on the source code. It was on the machine that turns source code into a product.\u003c\/p\u003e\u003cp\u003e\u003c\/p\u003e\u003cp\u003eEXHIBIT 0016 \/ SUNBURST \/ 2020\u003c\/p\u003e","brand":"Printify","offers":[{"title":"Charcoal \/ S","offer_id":54505829007644,"sku":"24090791747107287539","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ S","offer_id":54505829040412,"sku":"14412264136299351900","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ S","offer_id":54505829073180,"sku":"15315780681599655363","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ S","offer_id":54505829105948,"sku":"13798632768223352201","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ S","offer_id":54505829138716,"sku":"11864648438482315645","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ M","offer_id":54505829171484,"sku":"55919176557880260349","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ M","offer_id":54505829204252,"sku":"35492668173644112954","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ M","offer_id":54505829237020,"sku":"29880925870174590481","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ M","offer_id":54505829269788,"sku":"27389400170408049195","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ M","offer_id":54505829302556,"sku":"19921469053367155980","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ L","offer_id":54505829335324,"sku":"20023241286103451480","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ L","offer_id":54505829368092,"sku":"14664335315847738044","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ L","offer_id":54505829400860,"sku":"20380415548065205593","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ L","offer_id":54505829433628,"sku":"29492776050808245111","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ L","offer_id":54505829466396,"sku":"31413057793688158358","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ XL","offer_id":54505829499164,"sku":"62373453965275059944","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ XL","offer_id":54505829531932,"sku":"15453720532249722815","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ XL","offer_id":54505829564700,"sku":"32900921629601500054","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ XL","offer_id":54505829597468,"sku":"26843549182322110805","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ XL","offer_id":54505829630236,"sku":"26140909902078173502","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 2XL","offer_id":54505829663004,"sku":"27413788783056884068","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 2XL","offer_id":54505829695772,"sku":"25577692144397222645","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 2XL","offer_id":54505829728540,"sku":"24743624678913919952","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 2XL","offer_id":54505829761308,"sku":"93410501205291448994","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 2XL","offer_id":54505829794076,"sku":"14025747793207825469","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Charcoal \/ 3XL","offer_id":54505829826844,"sku":"25306826375140367196","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Navy \/ 3XL","offer_id":54505829859612,"sku":"24412565991716939927","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Royal \/ 3XL","offer_id":54505829892380,"sku":"12479120025780327359","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Black \/ 3XL","offer_id":54505829925148,"sku":"15202277447956732091","price":24.99,"currency_code":"USD","in_stock":true},{"title":"Dark Heather \/ 3XL","offer_id":54505829957916,"sku":"19787227510076048354","price":24.99,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0961\/8184\/6300\/files\/13703303646394804515_2048.jpg?v=1788376245","url":"https:\/\/unhacked.shop\/products\/solarwinds-sunburst-shirt-2020-supply-chain-attack-graphic-tee-unhacked","provider":"Unhacked","version":"1.0","type":"link"}