A top private-sector cybersecurity executive in Kyiv, Oleh Derevianko, said that the intruders penetrated the government networks through a shared software supplier in a supply-chain attack like the 2020 SolarWinds Russian cyber espionage campaign that targeted the US government.