Following the digital breadcrumbs, as Brian Krebs famously does, reveals a potentially deep and rich history of an organization that may be tailored for software supply chain attacks. Interesting read.
It makes me wonder: how many covert malignancies exist across hardware, firmware, and software supply chains? How big is the growing problem that puts the foundation of digital growth and users at risk?
Are such complex gears part of larger mechanisms of the growing capabilities of nation state tools?
I think we are at a point where investigators will find such instruments and definitively attribute them to governments. Let the show begin!