A supply chain attack targets an organization indirectly by compromising a vendor, software update channel, or service provider. The attacker leverages the trusted relationship to reach the primary target. Recent cases include malicious code in open-source repositories and stolen credentials from contractor machines.
Infostealer infections on vendor employees are a common supply chain risk vector. When a contractor's laptop is infected, their credentials for client VPNs, ticketing systems, and cloud consoles enter criminal markets. Monitoring third-party domains for stealer exposures is a practical supply chain defense.
Read how one infection unraveled a supply chain espionage case in our DPRK crypto investigation and the GitHub attack in our 5,000+ repo supply chain report.