#Jetbrains teamcity hack full

UCG reveals this was and continues to be “ an intelligence-gathering effort” and the task force is taking all the necessary steps to understand the full scope of this campaign and respond accordingly. “This work indicates that an Advanced Persistent Threat (APT) actor, likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and non-governmental networks,” the UCG said in a statement. Though the two companies remained mum on Russia’s involvement initially, they mentioned it is the work of highly sophisticated nation-state hackers.

#Jetbrains teamcity hack update

Days later, it was found that a software update for SolarWinds Orion software infected with malicious code was downloaded and used by 18,000 enterprise customers. The cyberattack came to light on December 9 when FireEye disclosed that a nation-state group hacked its systems to gain access to internal hacking tools. The newly minted cybersecurity task force - composed of the FBI, CISA, and Office of the Director of National Intelligence (ODNI) with support from NSA warns the lengthy, wide-ranging campaign that began as early as in March 2020 is the work of an Advanced Persistent Threat actor having ties with Russia. federal agencies and several global organizations, is a broad cyber espionage campaign backed by Russia, confirmed the Cyber Unified Coordination Group (UCG). The Solarwinds hack, one of the most extensive and devastating supply-chain attacks which impacted nearly 10 U.S. federal agencies and impacted several organizations is an intelligence gathering effort by Russians, investigations by the newly-minted U.S. “We are not aware of any vulnerabilities in the product or breaches that would allow for this, nor that any of our customers were affected.The devastating SolarWinds hack, which has led to the compromise of nearly ten U.S. “We are not aware of any investigation nor have we been contacted by any agencies,” a JetBrains spokesman said.

Like Orion IT, TeamCity is used by companies around the world, making it extremely important to determine if it was compromised as well. JetBrains makes a project management application called TeamCity.

The FBI is now concerned a second application may have been compromised in a similar nature, according to Reuters. Since this legitimate software is in use by countless organizations, by compromising it and installing a trojan directly in it, hackers were able to hack organizations using Orion IT. Rather than trying a brute force attack, or tricking organizations into installing suspect software, hackers compromised SolarWinds’ Orion IT monitoring and management software. What made the SolarWinds attack so successful was that it was a supply chain attack. Some experts have said it will take months, or even years, to understand the extent of the damage. The SolarWinds attack was one of the largest, most damaging hacks against US government and corporate entities. The FBI is trying to determine if JetBrains was compromised as part of the SolarWinds attack.