Cybersecurity firm CrowdStrike announced to have discovered a third malware strain, named Sunspot, directly involved in the SolarWinds supply chain attack. CrowdStrike does not attribute any of the three implants to any known threat actors. Sunspot was discovered after the Sunburst/Solorigate backdoor and Teardrop malware, but chronologically it may have been the first code to be involved in attack chronologically. The report published by CrowdStrike includes Indicators of Compromise and Yara rules to detect this new strain of malware.”]
Source: https://securityaffairs.co/wordpress/113316/malware/sunspot-solarwinds-attack.html

