The attack was mounted via SolarWinds Orion, in a manual and targeted supply-chain effort.
Source: Threadpost