Supply chain attacks are frightening because of how undetectable they may be. here’s how it works:

1. Attackers hunt for unsecure network protocols, unprotected server infrastructures, and unsafe coding practices, usually from from trusted vendors.
2. They then break in and change the code, hiding their malware in build and update processes.
3. These apps and updates are then signed and certified, with the software vendor unaware that their app or update has been infected with malicious code, unwittingly releasing this infected product to the public.
4. The malicious code then infiltrates user systems with ease, as it runs with the same trust and permissions as the uninfected app would.
   
   

The number of victims can be quite significant, especially when popular apps are targeted. For example, one case saw a free file compression app poisoned and deployed to customers in a country where it was the top utility app.