Sunburst Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
11
occurrences
First Seen
October 23, 2025
Last Seen
July 23, 2026

Related Threat Clusters

  • Operation Endgame Disrupts Evil Corp's SocGholish Malware Network

    On June 18, 2026, international law enforcement agencies launched Operation Endgame, disrupting the SocGholish malware infrastructure linked to the Russian cybercrime group Evil Corp. The operation resulted in the…

    67 articles · Updated June 18, 2026
  • SUNBURST Backdoor Exploits SolarWinds Supply Chain Vulnerability

    The SUNBURST backdoor, discovered by FireEye, exploits trojanized updates to SolarWinds Orion software, affecting numerous public and private organizations globally. The attack vector involves a malicious DLL,…

    2 articles · Updated June 16, 2026
  • Critical Authentication Bypass in SolarWinds Orion API (CVE-2020-10148)

    The SolarWinds Orion API is vulnerable to an authentication bypass, allowing remote attackers to execute API commands without authentication. This vulnerability, identified as CVE-2020-10148, can be exploited by…

    3 articles · Updated June 17, 2026
  • Cyber Supply Chain Risks in Energy Sector Highlighted by Recent Attacks

    The energy sector faces significant cyber risks due to reliance on interconnected IT suppliers. Recent attacks on external IT service providers have disrupted critical infrastructure, including public transport systems…

    7 articles · Updated July 24, 2026
  • SEC Drops Case Against SolarWinds Over 2020 Cyberattack

    The SEC has dropped its civil fraud case against SolarWinds and its CISO, Tim Brown, related to the 2020 SUNBURST cyberattack. This decision ends a significant legal action that aimed to hold the company accountable for…

    8 articles · Updated November 20, 2025
  • SEC Dismisses Case Against SolarWinds Over 2020 Cyberattack

    The SEC has dropped its case against SolarWinds and its CISO, Tim Brown, regarding their handling of a 2020 cyberattack linked to Russian hackers. The lawsuit, initiated in late 2023, accused them of failing to disclose…

    8 articles · Updated November 22, 2025

Recent Intelligence Reports

  • Navigating Cyber Supply Chain Disputes: Litigation Risk for Customers and IT Suppliers — Freshfields · July 23, 2026
  • Are The Notorious Cyber Criminals Evil Corp Actually Russian Spies — www.truesec.com · June 18, 2026
  • Securityadvisory — www.solarwinds.com · June 17, 2026
  • Sunburst Additional Technical Details — cloud.google.com · June 16, 2026
  • Discovered in late 2020 — cloud.google.com · June 16, 2026
  • SEC Dismisses Case Against SolarWinds, Top Security Officer — Rss.Slashdot · November 22, 2025
  • SEC Drops Remaining Claims Against SolarWinds Over 2020 Hack — Crn · November 21, 2025
  • SEC drops SolarWinds lawsuit that painted a target on CISOs everywhere — Theregister · November 20, 2025

CVSS v3.1 Breakdown