Supply chain attack

Breaking into a supplier in order to reach its customers. It can happen through poisoned software updates (as with SolarWinds in 2020), tampered hardware, or a compromised service provider such as an MSP.