What major cyber event did the SVR lead in 2020?

• A. The SolarWinds attack
• B. The WannaCry outbreak
• C. The NotPetya incident
• D. The Stuxnet attack

Answer: (A)

In 2020, a state-sponsored supply chain intrusion targeted a widely used IT product, compromising its update mechanism to gain broad access. This attack, often linked to the SVR, inserted a backdoor (SUNBURST) into the SolarWinds Orion software updates. Because many organizations install updates from trusted vendors, the malicious code rode in on legitimate software, giving attackers covert access to numerous networks, including government and critical infrastructure. That combination of a trusted update process and broad reach is what makes this event stand out.

The other incidents happened earlier and involved different actors: WannaCry struck in 2017 as ransomware attributed to Lazarus Group; NotPetya, also in 2017, was a destructive wiper linked to Russia; Stuxnet dates to around 2010 and was a joint U.S.–Israel operation aimed at Iran’s nuclear program. They do not match the 2020 timeframe or the SVR-led operation.