ExtraHop Data Shows 150 Percent Increase in Suspicious Network Activity During Peak of SUNBURST Attack
- Post-disclosure investigations revealed sophisticated attack patterns designed to subvert traditional security controls and detection methods
ExtraHop, the leader in cloud-native network detection and response, released a security report offering an in-depth look at the methods cybercriminals used to evade detection during the months before the SolarWinds SUNBURST exploit was discovered. The report also reveals significant increases in suspicious network activity that went largely ignored due to the privileged and trusted status of SolarWinds within the IT environment. As part of the report, ExtraHop also released an expanded list of over 1,700 SUNBURST indicators of compromise (IOCs) as observed across affected environments protected by Reveal(x), critical information that can help organizations determine if and to what extent they’ve been compromised.
“But because other detection methods weren’t alerting on the activity, it largely went ignored. In this case, the attack was strategically designed to evade those detections, and we can expect more similar attacks to follow. It’s an important reminder that the network doesn’t lie.”
During its own investigation, and through its work with customers to help detect and remediate the SUNBURST exploit, ExtraHop threat researchers found that between late March 2020 and early October 2020, detections of probable malicious activity increased by approximately 150 percent. These detections, which included lateral movement, privilege escalation, and command and control beaconing, evaded the more traditional detection methods like endpoint detection and response (EDR) and antivirus. Activity patterns outlined in the report indicate that the SUNBURST attackers were successful in flying under the radar of these detection methods either by disabling them, or by redirecting their approach before they could be detected.
Recommended AI News: Cornerstone to Bring Learning into the Flow of Work, Powered by Microsoft Viva
“Unfortunately, what we found when investigating SUNBURST is that the activity was actually detected on the network,” said Jeff Costlow, Deputy CISO, ExtraHop. “But because other detection methods weren’t alerting on the activity, it largely went ignored. In this case, the attack was strategically designed to evade those detections, and we can expect more similar attacks to follow. It’s an important reminder that the network doesn’t lie.”
Recommended AI News: ETF Action Announces Major Enhancements To Industry-Leading FinTech Platform
In addition to shedding new light on how the SUNBURST attackers were able to dwell within the network unchecked for so long, the report delves into several case studies on how ExtraHop customers investigated and remediated the exploit within their own environments. The case studies include details on how customers were able to use historical metrics to determine the duration of the compromise, as well as which systems and data may have been impacted.
Recommended AI News: Nokia to Help Deutsche Telekom’s Optical Transport Network Modernization
Copper scrap collection center Copper scrap industry knowledge Scrap metal handling equipment
Copper cable scrap reuse opportunities, Metal reclaim, Copper scrap purchase
mexican border pharmacies shipping to usa: medication from mexico – pharmacies in mexico that ship to usa
medication from mexico pharmacy
buy cheap ozempic [url=http://ozempic.art/#]ozempic generic[/url] buy ozempic pills online
buy cheap ozempic: Ozempic without insurance – buy ozempic pills online
https://ozempic.art/# buy ozempic
http://rybelsus.shop/# rybelsus pill
buy semaglutide online: buy semaglutide pills – semaglutide tablets
Ozempic without insurance [url=http://ozempic.art/#]ozempic[/url] buy ozempic
http://rybelsus.shop/# cheapest rybelsus pills
cheapest rybelsus pills: semaglutide online – buy semaglutide pills
http://rybelsus.shop/# rybelsus cost
buy ozempic: ozempic online – ozempic
https://ozempic.art/# ozempic online
Ozempic without insurance [url=https://ozempic.art/#]ozempic coupon[/url] buy ozempic
http://rybelsus.shop/# semaglutide cost
rybelsus price: buy rybelsus online – rybelsus pill
https://ozempic.art/# Ozempic without insurance
buy semaglutide pills [url=https://rybelsus.shop/#]rybelsus coupon[/url] rybelsus pill
semaglutide tablets: buy semaglutide pills – rybelsus pill
https://ozempic.art/# buy ozempic pills online
https://ozempic.art/# ozempic online
ozempic online: Ozempic without insurance – buy ozempic
https://ozempic.art/# ozempic generic
pin up c***** giris [url=https://pinupturkey.pro/#]pin up c***** guncel giris[/url] pin up aviator
pin up bet: pin up guncel giris – pin-up c*****
https://pinupkz.tech/# pin up
пинап кз [url=https://pinupkz.tech/#]пин ап казахстан[/url] пинап казино
пин ап 634: пин ап казино вход – pin up
пин ап казахстан: pin up kz – пин ап кз
пин ап казахстан http://pinupaz.bid/# pin-up kazino
pin up kz
пинап казино: пин ап официальный сайт – пин ап зеркало
пинап кз http://pinupaz.bid/# pinup az
пин ап казахстан
pin up казино: пинап казино – pin up казино
пин ап 634 https://pinupkz.tech/# пин ап казахстан
pin up казино
пинап казино: пин ап казино – пин ап казино зеркало
http://pinupaz.bid/# pinup az
пин ап казахстан http://pinupkz.tech/# пин ап
pin up
пин ап кз: pin up kz – пинап кз
пин ап казино http://pinupru.site/# pin up зеркало
пин ап кз
amoxicillin without a prescription [url=http://amoxil.llc/#]buy amoxil[/url] amoxicillin without rx
https://semaglutide.win/# Buy compounded semaglutide online
semaglutide: buy rybelsus – rybelsus generic
http://amoxil.llc/# buy amoxicillin 500mg canada
neurontin 150 mg [url=http://gabapentin.auction/#]gabapentin b*********[/url] buy neurontin uk
https://zithromax.company/# generic zithromax 500mg india
rybelsus generic: order Rybelsus for w********** – buy rybelsus
http://zithromax.company/# buy cheap generic zithromax
ivermectin online [url=https://stromectol.agency/#]stromectol b*********[/url] minocycline 100 mg online
https://gabapentin.auction/# neurontin brand name 800mg b*********
where can i buy zithromax capsules
https://stromectol.agency/# stromectol ireland
where to get amoxicillin over the counter [url=https://amoxil.llc/#]amoxil b*********[/url] amoxicillin 500mg capsules
https://stromectol.agency/# stromectol pill for humans
https://stromectol.agency/# order minocycline 100mg
buy zithromax online
https://gabapentin.auction/# neurontin 300 mg pill
https://stromectol.agency/# stromectol 3 mg price
zithromax online usa no prescription: can you buy zithromax over the counter in mexico – zithromax 500 tablet
zithromax online paypal [url=https://zithromax.company/#]buy zithromax z-pak online[/url] zithromax 500 price
https://semaglutide.win/# Semaglutide pharmacy price
zithromax z-pak price without insurance
https://gabapentin.auction/# cost of neurontin 600mg
https://stromectol.agency/# price of stromectol
https://semaglutide.win/# buy rybelsus
azithromycin zithromax
https://gabapentin.auction/# neurontin 100 mg capsule
amoxicillin cost australia [url=https://amoxil.llc/#]amoxicillin cheapest price[/url] buy amoxicillin online mexico
neurontin 100mg price: gabapentin for sale – neurontin india
Rybelsus 14 mg: rybelsus cost – Buy compounded semaglutide online
https://semaglutide.win/# buy rybelsus
amoxicillin over the counter in canada [url=https://amoxil.llc/#]cheapest amoxil[/url] can i buy amoxicillin online
http://mexicanpharm24.pro/# pharmacies in mexico that ship to usa
п»їlegitimate online pharmacies india
medicine in mexico pharmacies: reputable mexican pharmacies online – reputable mexican pharmacies online
mexican drugstore online [url=http://mexicanpharm24.pro/#]purple pharmacy mexico price list[/url] п»їbest mexican online pharmacies
mexican online pharmacies prescription drugs: mexican mail order pharmacies – mexico pharmacies prescription drugs
erectile dysfunction pills: foods for ed – ed drugs online
reputable mexican pharmacies online: medication from mexico pharmacy – mexican rx online
http://drugs24.pro/# medications for ed
buy medicines online in india
mexican rx online [url=https://mexicanpharm24.pro/#]buying from online mexican pharmacy[/url] mexican border pharmacies shipping to usa
website: ed medications over the counter – natural help for ed
https://drugs24.pro/# pet meds without vet prescription
indian pharmacy paypal
online ed pills: sexual dysfunction in men – male enhancement pills
best online pharmacy india: online shopping pharmacy india – indian pharmacy
best ed pills that work https://mexicanpharm24.pro/# purple pharmacy mexico price list
https://stromectol1st.shop/# stromectol ireland
online pharmacy india
paxlovid buy: paxlovid buy – paxlovid price
https://stromectol1st.shop/# ivermectin 0.1 uk
cheapest online pharmacy india
http://stromectol1st.shop/# ivermectin over the counter canada
india pharmacy
rybelsus [url=https://rybelsus.icu/#]buy semaglutide online[/url] Buy semaglutide
https://stromectol1st.shop/# ivermectin ebay
indian pharmacy
ivermectin 9 mg tablet [url=https://stromectol1st.shop/#]b********* shop[/url] stromectol xl
https://stromectol1st.shop/# ivermectin price comparison
world pharmacy india
more: order Rybelsus – rybelsus price
http://rybelsus.icu/# cheaper
best otc ed pills
Buy semaglutide: Buy semaglutide – buy semaglutide online
cost for ivermectin 3mg: stromectol shop – minocycline ointment
http://stromectol1st.shop/# stromectol tablets for humans for sale
online shopping pharmacy india
http://rybelsus.icu/# rybelsus price
cheap medications
buy clopidogrel online: clopidogrel – buy clopidogrel online
http://stromectol1st.shop/# stromectol online canada
reputable indian online pharmacy
ivermectin buy australia: stromectol 1st shop – ivermectin 2mg
Cost of Plavix without insurance [url=http://clopidogrel.pro/#]plavix price[/url] generic plavix
http://1winbrasil.win/# pin-up
пин ап
пин ап [url=http://1winci.icu/#]пинап зеркало[/url] пин ап вход
pin up kz: пин ап казино вход – пин ап кз
pin up c***** [url=http://1winbrasil.win/#]pin up azerbaycan[/url] pin up azerbaycan
https://1winci.icu/# пин ап вход
пин ап
пин ап: пинап кз – пинап
http://1winrussia.online/# 1xbet
пин ап казино
pin up kz: пинап – пин ап казино вход
1хбет: 1xbet скачать – 1хбет
pin up c***** [url=http://1winbrasil.win/#]pinup az[/url] pin-up
http://1winci.icu/# пинап зеркало
пинап
c***** siteleri: guvenilir c***** siteleri – c***** sitesi
pin up: pin up – пин ап
пинап кз [url=http://1winindia.tech/#]пинап[/url] пин ап кз
пин ап: пин ап зеркало – пин ап официальный сайт
пин ап вход [url=http://1winci.icu/#]пинап зеркало[/url] пин ап зеркало
пин ап: пин ап – пин ап зеркало
1xbet скачать [url=http://1winrussia.online/#]1xbet зеркало[/url] 1xbet скачать
pin up azerbaycan: pin-up – pin up azerbaycan
buying prescription drugs in mexico: п»їbest mexican online pharmacies – mexico pharmacies prescription drugs
http://drugs1st.store/# ed problems treatment
top 10 online pharmacy in india: best india pharmacy – top 10 online pharmacy in india
buy medicines online in india [url=http://indianpharm1st.com/#]online pharmacy india[/url] indianpharmacy com
best ed pills online: treatment of ed – otc ed pills
https://indianpharm1st.com/# online shopping pharmacy india
supplements for ed [url=http://drugs1st.store/#]buy medication online[/url] ed medications
http://drugs1st.store/# pharmacy online
pinco: пин ап – пин ап
https://sweetbonanzatr.pro/# sweet bonanza tr
пинап [url=https://biznes-fabrika.kz/#]пинап казино[/url] пины
pin up kz: пин ап кз – пин ап кз
http://biznes-fabrika.kz/# Пин Ап Казахстан
пинко: пин ап казино – pin up zerkalo
Пин Ап Казахстан: Пин Ап Казахстан – пин ап кз
https://sweetbonanzatr.pro/# sweetbonanzatr.pro
pinup bet and c*****
http://biznes-fabrika.kz/# pin up kz
pin up zerkalo
пинко: pinco – пин ап
пин ап казино [url=http://biznes-fabrika.kz/#]Пин Ап Казахстан[/url] пин ап казино онлайн
pinup az: pin-up – pin up 306
пинап [url=http://biznes-fabrika.kz/#]пины[/url] пин ап казино онлайн
pin up azerbaycan: pin up – pinup az
sweet bonanza: sweet bonanza – sweet bonanza tr
stromectol delivery usa: stromectol – stromectol b*********
See risks: cheapest paxlovid – paxlovid1st
buy gabapentin: involves multisystem – Neurontin online
buy gabapentin: gabapentin pro – gabapentin b*********
https://gabapentin1st.pro/# compare the best prices
paxlovid store: paxlovid store – see a healthcare provider
erection pills v***** online http://pharm24.pro/# ed dysfunction
https://mexicanpharm24.cheap/# best online pharmacies in mexico
home remedies for erectile dysfunction
buy medicines online in india [url=https://indianpharm24.pro/#]Pharmacies in India that ship to USA[/url] indianpharmacy com
http://indianpharm24.pro/# top online pharmacy india
cheap erectile dysfunction
indian pharmacy paypal [url=https://indianpharm24.pro/#]Best Indian pharmacy[/url] top online pharmacy india
ed aids http://indianpharm24.pro/# best online pharmacy india
http://indianpharm24.pro/# india online pharmacy
levitra without a doctor prescription
pills for erection: cheap medication – ed pumps
medication from mexico pharmacy: Mexican pharmacy ship US – reputable mexican pharmacies online
erection pills that work https://indianpharm24.pro/# Online medicine order
deneme bonusu veren siteler denemebonusu2026.com https://denemebonusuverensiteler.top/# deneme bonusu veren yeni siteler
deneme bonusu veren siteler 2024 [url=https://denemebonusuverensiteler.top/#]deneme bonusu veren siteler mycbet.com[/url] deneme bonusu veren siteler mycbet.com
http://ultrabet-tr.online/# ultrabet bonus
deneme bonusu veren siteler betturkey betturkey.com
ultrabet guncel: ultrabet giris – ultrabet bonus
deneme bonusu veren siteler yerliarama.org https://casinositeleri.win/# c***** siteleri win
matadorbet.bid [url=https://matadorbet.bid/#]matadorbet giris[/url] matadorbet
https://casinositeleri.win/# guvenilir c***** siteleri
deneme bonusu veren siteler betturkey
en cok kazand?ran slot oyunlar?: slot siteleri – slot oyunlar? puf noktalar?
ultrabet guncel [url=https://ultrabet-tr.online/#]ultrabet giris[/url] ultrabet
matadorbet giris: matadorbet – matadorbet
matadorbet.bid: matadorbet – matadorbet
deneme bonusu veren siteler yerliarama.org https://denemebonusuverensiteler.top/# deneme bonusu veren siteler yeni
C***** Siteleri: guvenilir c***** siteleri – Canl? C***** Siteleri
matadorbet.bid [url=https://matadorbet.bid/#]matadorbet bid[/url] matadorbet bid
fur pharm [url=https://furpharm.com/#]furosemide[/url] furpharm
https://erepharm.com/# buy ed pills
buy Gabapentin GabaPharm [url=https://gabapharm.com/#]buy gabapentin online[/url] buy gabapentin
ED pills non prescription [url=http://erepharm.com/#]buy ed pills[/url] buy ed pills
kam pharm shop [url=https://kampharm.shop/#]kamagra[/url] kampharm.shop
rybpharm cheap semaglutide: buy rybelsus rybpharm – rybpharm rybelsus
https://kampharm.shop/# kampharm shop
GabaPharm: gabapentin GabaPharm – buy gabapentin
kam pharm shop [url=http://kampharm.shop/#]Kamagra Kam Pharm[/url] Kamagra Kam Pharm
https://rybpharm.com/# rybpharm
rybpharm rybelsus: buy rybelsus – buy rybelsus online usa
https://kampharm.shop/# kampharm shop
cheapest Gabapentin GabaPharm: Buy gabapentin for humans – gabapentin GabaPharm
https://erepharm.com/# cheapest ed pills ere pharm
fur pharm [url=https://furpharm.com/#]buy furosemide online[/url] cheapest lasix
https://furpharm.com/# furosemide fur pharm
pain meds without written prescription [url=https://canadiandrugsgate.com/#]canadian drugs gate[/url] ed c****
prescription drugs: Canada pharmacy online – erectile dysfunction drug
medicine in mexico pharmacies: Mexican Pharmacy Gate – mexican online pharmacies prescription drugs
pharmacy website india: Indian online pharmacy ship to usa – pharmacy website india
п»їbest mexican online pharmacies: mexican pharmacy online – mexico drug stores pharmacies
http://canadiandrugsgate.com/# google v***** dosage recommendations
pet meds without vet prescription canada [url=https://canadiandrugsgate.com/#]Canada pharmacy online[/url] male ed
indian pharmacy: indianpharmacyeasy.com – india online pharmacy
reputable mexican pharmacies online: MexicanPharmGate – buying prescription drugs in mexico
causes of ed: canadiandrugsgate.com – online ed pills
indian pharmacy [url=https://indianpharmacyeasy.com/#]indianpharmacyeasy[/url] indian pharmacy paypal
buying prescription drugs in mexico: Mexican Pharm Gate – buying prescription drugs in mexico
amoxicillin 500 mg without prescription http://clomidrexpharm.com/# clomid for sale
priligy max pharm [url=https://priligymaxpharm.com/#]buy priligy max pharm[/url] cheap priligy
amoxicillin 500mg price canada http://clomidrexpharm.com/# where can i buy generic clomid pills
priligy maxpharm: priligy maxpharm – dapoxetine price
amoxicillin 500 mg brand name: Amoxicillin Com Pharm – generic for amoxicillin
buy priligy [url=https://priligymaxpharm.com/#]priligy maxpharm[/url] buy priligy
amoxicillin 500mg buy online uk: com pharm – amoxicillin 500mg without prescription
can you buy generic clomid for sale: can you get generic clomid prices – cost clomid without insurance
buy dapoxetine online: buy priligy max pharm – priligy maxpharm
cost of cheap clomid pills: clomid online – how to buy generic clomid for sale
amoxicillin 500mg capsules antibiotic: amoxil – amoxicillin medicine
medication from mexico pharmacy http://mexicanpharmgate.com/ mexican online pharmacies prescription drugs
average cost of generic prednisone: generic Prednisone – prednisone over the counter
cheapest Lisinopril: lisinopril1st – cheapest Lisinopril
prednisone price australia: raypharm – prednisone 15 mg daily