Common threats

6. Supply chain attacks

Supply chain attacks are frequently a form of  Targeted Attack towards businesses, governments, and activists, although they can end up compromising the public at large as well.

A notable example of this occurred in 2017 when M.E.Doc, a popular accounting software in Ukraine, was infected with the NotPetya virus, subsequently infecting people who downloaded that software with ransomware. NotPetya itself was a ransomware attack which impacted 2000+ companies in various countries, and was based on the EternalBlue exploit developed by the NSA to attack Windows computers over the network.