Researchers with Microsoft and FireEye found three new malware families, which they said are used by the threat group behind the SolarWinds attack. The malware families include: A backdoor that s called GoldMax by Microsoft and called Sunshuttle by FireEye; a dual-purpose malware called Sibot discovered by Microsoft; and a malware called GoldFinder also found by Microsoft. Microsoft said these latest custom attacker tools are tailor-made for specific networks and are assessed to be introduced after the actor has gained access.
Source: https://threatpost.com/microsoft-fireeye-malware-solarwinds/164512/

