A deep dive into Avivore. Issue 8 (August 2020)

• Record Type: Journal Article
• Authors: Fay, Oliver
• Is Part Of: Computer fraud & security. Issue 8(2020)
• Page Start: 12
• Page End: 14
• Publication Date: 2020-08
• Subjects: Computer crimes -- Periodicals; Computers -- Access control -- Periodicals; 364.168
• DOI: 10.1016/S1361-3723(20)30085-3
• Languages: English
• ISSNs: 1361-3723

Abstract

Abstract : Until now, most prominent supply chain intrusions have been vertical attacks, with the initial victims typically managed service providers (MSPs) or vendors targeted as a way of getting into and moving up or down the supply chain. However, incidents earlier this year targeting large multi-national firms in the aerospace and defence sectors can best be described as horizontal. Advanced attackers have been leveraging relationships and connectivity between suppliers and partners to get a foothold in each other's value chains. However, recent incidents targeting large multi-national firms in aerospace and defence can best be described as horizontal. Attackers have leveraged connectivity between suppliers and partners to get a foothold in each other's value chains. Oliver Fay of Context Information Security details a new threat group, codenamed Avivore, that has been compromising collaborative working solutions to bypass well-defended perimeters.