I know. Sorry not sorry 😆

RAINDROPS in servers and
TEARDROPS exploding
Cobalt Strike BEACON and
Malware unloading
SUNBURST-wrapped packages
With malicious strings
SolarWinds has all my favourite things!
Is it Russia?
Could be China?
There’s still more to learn
Now UNC2452 found their favourite things
SUNBURST really leaves a burn!

And this. Thanks to all involved who are researching, reporting, responding and securing. You’re doing an awesome job!