SolarWinds hack was work of 'at least 1k engineers', tech execs tell Senate

We have to remember that the tech execs (I believe msft execs) that are claiming it's extremely sophisticated were also victims of this attack as well. They have every reason to claim this was a highly funded extremely sophisticated attack, because otherwise, it would be rather embarrassing for a giant like msft to have been pwned in such a significant way.

60 Minutes did an expose and interviewed a msft exec who made the 1,000 hacker claim and that it was the most sophisticated attack they had ever seen. But they had another cyber-security expert on that said it wasn't even close to the most sophisticated just that it was one of the most successful/prolific. He even suggested that he personally had created more sophisticated tools.

Now, that expert runs a cyber-security firm, so he may want to look like the kind of expert you want to hire.

But either way, there are conflicting testimonies here and I would want to see more information and evidence on why this was such a sophisticated attack before I believe it.

Interesting, knowing how hard is to deal with large teams when secrecy is a requirement, when the work to be done isn't diluted in lots of code and where there's no room for bugs...

I would bet in a very small and skilled team.

Ridiculous. It just takes one skilled hacker to exploit SolarWinds and therefore obtain privileged access as per this software terrible security practice.

This hearing is trying to make SolarWinds an innocent victim here, where they should be responsible for delivering such insecure "spyware" themselves.

It would take a lot of manpower to find all those zero day exploits and reverse engineer proprietary code to enable its functionality on standard processes.

It is similar to stuxnet in that regard.