Third-Party Compromise - 1

security: Undermining the trust boundary: Investigating a stealthy intrusion through third-party compromise

Microsoft Incident Response described an intrusion that used legitimate administrative mechanisms and a third-party compromise to stay hidden within routine operations. The report emphasizes that attackers increasingly avoid noisy exploits and custom malware by abusing trusted systems already present in the environment.