The attack deployed a malware-laced update for SolarWinds’ Orion software that infected the networks of U.S. government agencies and corporations