Скачать или смотреть The Russian Hackers who Infiltrated 18,000 Companies.

In March 2020, a routine software update was released to 18,000 organizations worldwide. IT administrators installed it expecting bug fixes and security improvements. What they didn't know was that Russian state-sponsored hackers had spent months infiltrating the software supply chain, turning a trusted update into a weapon.
This is the story of the SolarWinds attack, the most sophisticated cyberattack in history. For nine months, Russia's Foreign Intelligence Service operated undetected inside the U.S. Treasury, Department of Homeland Security, State Department, Department of Energy, and dozens of major corporations including Microsoft, Cisco, and Intel. They didn't break through firewalls. They didn't exploit zero-day vulnerabilities. They became the company that built the software itself.
From the initial breach in late 2019 to the discovery by a single FireEye employee who noticed an unauthorized multi-factor authentication alert, this documentary examines how the attackers used SUNSPOT injector malware, SUNBURST backdoors, Golden SAML token forgery, and Cobalt Strike frameworks to execute an intelligence operation that changed cybersecurity forever.
The attack cost an estimated $90-100 billion in remediation, triggered Emergency Directive 21-01, led to Executive Order 14028 mandating software bills of materials, and fundamentally altered the assumption that software updates from trusted vendors are safe.
This investigation is reconstructed from official government reports, cybersecurity forensic analysis, and congressional testimony. All sources are linked below.
Sources: https://pastebin.com/FiDzU1cW
Disclaimer: This documentary is created for educational and journalistic purposes. All technical details are reconstructed from publicly available official reports, forensic analysis, and congressional testimony. No exploit code or actionable hacking instructions are provided.

Support the Channel:
Subscribe for more cybersecurity documentaries
Like if you learned something new
Comment your theory on the initial breach method
You can also watch :    • Why the FBI Can't Stop This Scam | The Pha...