Thread by @j2dumfounded

Time for a little thread on SolarWinds $SWI which has been hacked by Russia’s FSB, APT P29, commonly known as Cozy Bear.

The hackers embedded code that allows access to databases of the many clients SolarWinds sells to, including USG & 425 of the Fortune 500.

🧸

Sunday, Arapaho was kind enough to tag me in on the breaking development.
I’ll share her great thread, then dive into some breaking news, then wrap with a bit of info from investor analysts.

https://twitter.com/arapaho415/status/1338290147138236416

Long story short, this is a 🚨 DISASTER OF EPIC PROPORTIONS 🚨.

General McCaffrey is not a word mincer.
He’s directly calling out Trump here. 🆘

https://twitter.com/mccaffreyr3/status/1339092435050188801

Over at AP News, Frank Bajak is not mincing words, either.

https://twitter.com/youmustchange/status/1339100061825961985

Went to check in on my fave datasec guy and it turns out Chris Vickery is on Zev’s show tonight. It’s an hour long so I’ll post it now and screen it later if I can stay awake that long. 🥱

https://twitter.com/zevshalev/status/1339021042803683330

Brian Krebs is reporting 18,000 customers may have been impacted by the malware!

https://twitter.com/briankrebs/status/1338902959007129600

This from the Wall Street Journal, “The Cybersecurity and Infrastructure Security Agency issued an emergency alert Sunday night urging federal agencies to disconnect from the affected SolarWinds product.”

wsj.com/articles/hack-…

As I like to say about the Kremlin, it’s not official until the official denial.

“Russia’s foreign-intelligence service is thought to be behind the attack but the Russian Embassy in Washington has denied those claims.”

Full #LavrovLaffOff. 🤡🧸

OK time for a nice compilation of $SWI analysis from the (free) app Seeking Alpha.

Trading Places Research call the SolarWinds breach potentially the 🚨 most consequential hack of all time 🚨

This is simply a partial list of the over 18,000 customers who could find the cozy Russian bear has come through their back door and emptied out the larder of all its goodies. Nom, nom. Cozy Bear is hangry.

And Cozy Bear has found the pantry well stocked with all sorts of delectable data. Pretty much the proverbial keys to the kingdom. We’re so fucked.

What’s that saying?

DON’T PUT ALL YOUR EGGS IN ONE BASKET

🤦‍♀️🤦‍♀️🤦‍♀️🤦‍♀️🤦‍♀️


Cute accent and some nice blues guitar are bonuses on this explainer.

Let’s look at why, why is Cozy Bear so hangry?

Well, back in 2014 Putin annexed Crimea from Ukraine.
EU & USA slapped on sanctions.

Sanctions hurt Russia bigly.

Rather than free Crimea, Putin installed his orange puppet…& here we are.

Where we are is pretty grim. FSB can set its users to highest level of permissions. This is going to take a long time to undo, and even then, all that government information and private sector financial information is now in the Kremlin’s hands. The horse is out of the barn.

And Trump will do nothing. We don’t even have the people in place to lead a response.
Coincidence? Oh, please.
The White Rabbit & Cozy Bear are drinking vodka in the banya, gloating with glee at what they have done.
As for the leadership at $SWI, that’s a thread for another day.

Oh, you see the typo now... eleven hours too late.

Cozy Bear is APT 29 not APT P29

My effen legion typos 😖

Remember what the doormouse said...
keep your head.

https://twitter.com/mcfaul/status/1339435926703931392

Well, this is just a clusterfvck.

https://twitter.com/natashabertrand/status/1339669287846506496

People in America don’t seem to acknowledge that Russia considers itself at war with the USA. Perhaps under President Biden’s administration we can come to better terms with the grim reality.

Kelly gets it 🥶

https://twitter.com/kelly2277/status/1273785944001429504

Just remember, from here to eternity, that the greatest intelligence failure in American history occurred when Donald J. Trump was Commander in Chief.

#WhatWouldPutinDo

https://twitter.com/john_sipher/status/1339558176790855684

Blumenthal is correct. We need a massive response...which will not occur until Biden is in the White House.

https://twitter.com/new_narrative/status/1339746567218225154?s=21