An analyst discovers malicious software present within the network.

This scenario describes aSupply Chain Attack, where malicious code or components are introduced into software by a third-party vendor or supplier, which then becomes part of the legitimate software used within an organization. Such attacks compromise the trust in software supply chains and can cause widespread impact.

Third-Party Malwareis a more generic term and does not fully capture the supply chain context.

Account Takeoverinvolves unauthorized access to user accounts.

Ransomwareis malware that encrypts data and demands payment, unrelated to origin tracing here.

Splunk’s cybersecurity training andMITRE ATT&CKemphasize supply chain attacks as a high-risk vector, particularly given the increasing use of third-party software.