[arafsheikh]

Official blog post (no info on how the attack was performed though): https://www.fireeye.com/blog/products-and-services/2020/12/f...

They’ve also released signatures to detect the use of the compromised tools: https://github.com/fireeye/red_team_tool_countermeasures

[dang]

(This comment was originally in https://news.ycombinator.com/item?id=25354426 but we're merging the threads.)