Differences

This shows you the differences between two versions of the page.

--- wiki:welcome [2017/08/23 23:51] – external edit 127.0.0.1
+++ wiki:welcome [2021/01/10 11:39] – [Join the Community] dk
@@ Line 1: / Line 1: @@
-====== Welcome to your new DokuWiki ======
+====== What is it about? ======
-Congratulations, your wiki is now up and running. Here are a few more tips to get you started.
+The SolarWinds® Orion Platform is a powerful, scalable infrastructure monitoring and management platform.
+Recently, it was reported that SolarWinds product Orion was compromised by distributing backdoor software on their software update system.
-Enjoy your work with DokuWiki,\\
+**SolarWinds.Orion.Core.BusinessLayer.dll** is a SolarWinds digitally-signed component of the Orion software framework that contains the backdoor that communicates via HTTP to third party servers also the exploit will be dormant for 1-2 weeks.
--- the developers
-===== Create your first pages =====
+The domain **avsvmcloud[.]com** was the command and control (C&C) server for the backdoor delivered to around 18,000 SolarWinds customers through tainted updates for the SolarWinds Orion app.
-Your wiki needs to have a start page. As long as it doesn't exist, this link will be red: [[:start]].
-Go on, follow that link and create the page. If you need help with using the syntax you can always refer to the [[wiki:syntax|syntax page]].
+Here is the workflow of the malware released by FireEye
-You might also want to use a sidebar. To create it, just edit the [[:sidebar]] page. Everything in that page will be shown in a margin column on the side. Read our [[doku>faq:sidebar|FAQ on sidebars]] to learn more.
+{{:wiki:fireeye_sunburst_malware_workflow.jpg?600 |}}
-Please be aware that not all templates support sidebars.
-===== Customize your Wiki =====
-Once you're comfortable with creating and editing pages you might want to have a look at the [[this>doku.php?do=admin&page=config|configuration settings]] (be sure to login as superuser first).
+===== Here are some external links to get started =====
-You may also want to see what [[doku>plugins|plugins]] and [[doku>templates|templates]] are available at DokuWiki.org to extend the functionality and looks of your DokuWiki installation.
+[[https://www.fireeye.com/blog/threat-research.html|FireEye threat research about Sunburst]]
-===== Join the Community =====
+[[https://www.fireeye.com/current-threats/sunburst-malware.html|Sunbust malware]]
+[[https://www.microsoft.com/security/blog/2020/12/18/analyzing-solorigate-the-compromised-dll-file-that-started-a-sophisticated-cyberattack-and-how-microsoft-defender-helps-protect/|Microsoft security]]
+[[https://en.wikipedia.org/wiki/Domain_generation_algorithm|Domain generation algorithm]]
-DokuWiki is an Open Source project that thrives through user contributions. A good way to stay informed on what's going on and to get useful tips in using DokuWiki is subscribing to the [[doku>newsletter]].
-The [[http://forum.dokuwiki.org|DokuWiki User Forum]] is an excellent way to get in contact with other DokuWiki users and is just one of the many ways to get [[doku>faq:support|support]].
-Of course we'd be more than happy to have you [[doku>teams:getting_involved|getting involved]] with DokuWiki.