Researchers have spotted notable code overlap between the Sunburst backdoor and a known Turla weapon. Researchers at Recorded Future report a rise in cracked Cobalt Strike and other open-source adversarial tools with easy-to-use interfaces. Researchers say RSA got their ass kicked here because they built a 100% software-based security system. This is how the master keys for credit card issuing are handled. It’s been standard practice in the financial sector for decades, but RSA, as leaders in the security space, should have known this.
Source: https://threatpost.com/anatomy-rsa-attack-081811/75560/