Supply Chain Compromise: How Threat Actors Leverage Trusted Relationships to Achieve Initial Access

The threat of supply chain compromise represents a particularly nefarious issue for defenders, as it involves the compromise of a trusted third party through which the threat actor then subsequently compromises additional victims. To complicate things even more, the subsequent victims of these supply chain attacks are often unaware that they have been attacked in the first place due to the trusted nature of the relationship between the 3rd party victim and the supplier.

Accordingly, this brief will discuss CrowdStrike’s most current understanding of supply chain threats, to include the threat actors that perpetrate them, associated infrastructure and capabilities, as well as observed TTPs that are leveraged in the course of these advanced attacks.