Kaspersky warns of supply chain attacks at eSecurity conference

At the eSecurity conference in Belgrade, Kaspersky experts highlighted that trust has become a new attack surface for cybercriminals. As organizations strengthen their direct defenses through multi-factor authentication, EDR, and network segmentation, attackers are increasingly targeting the supply chain to bypass these barriers.

By compromising a trusted partner, software library, or vendor, attackers can gain legitimate access to highly protected networks. A common method involves compromising a smaller software provider and injecting malicious code into official installation files. This allows the attacker to enter a target network through a legitimate download, subsequently using system tools like PowerShell to maintain presence and escalate privileges.