Eric Geller

@ericgeller ↗

Deleted No

Hibernated Yes

Last Checked April 22, 2021

Created

Thu Jan 07 15:05:10 +0000 2021

Likes

Retweets

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available

Eric Geller @ericgeller

CISA expands on previous finding that SolarWinds wasn't only initial vector: Hackers have been "adding authentication credentials, in the form of assigning tokens and certificates," as "persistence and escalation mechanisms." — PolitiTweet.org

Posted Jan. 7, 2021 Hibernated

Preceded By

Eric Geller @ericgeller

Amid the chaos yesterday, CISA updated its guidance to agencies about SolarWinds. Agencies with no evidence of post-infection spying can turn SW Orion back on with the latest, NSA-verified update. Agencies spied on cannot. https://t.co/lQ3Wuq5rMd https://t.co/YzKaeoRo52 https://t.co/TPWS2tzI7f — PolitiTweet.org

Posted Jan. 7, 2021 Hibernated

Followed By

Eric Geller @ericgeller

CISA is "investigating incidents in which activity indicating abuse of [authentication] tokens consistent with this adversary’s behavior is present, yet where impacted SolarWinds instances have not been identified. CISA is continuing to work to confirm initial access vectors..." — PolitiTweet.org

Posted Jan. 7, 2021 Hibernated