In order to gain such extensive access, the malware in this attack came from a trusted source, SolarWinds' own software deployment servers, thus preventing security compliance programs and tools that rely on adversary signatures from blocking the hacker's activities or alerting network defenders.