The RSA hack: theft of SecurID seeds and a historic supply-chain attack

In 2011, RSA’s network was compromised after an RSA employee in Australia opened a malicious Excel attachment. The file exploited a zero-day vulnerability in Adobe Flash and installed Poison Ivy. The attackers moved through the network using stolen usernames and passwords and copied the seeds used by RSA SecurID authentication tokens. RSA later stated that information taken from RSA had been used as part of an attempted broader attack on Lockheed Martin; former RSA executives later disputed whether that link was proven, while Lockheed Martin stood by its findings.