A nesting doll of hacking tools has emerged in the SolarWinds campaign.

The group known as Charming Kitten used malicious links to capture login credentials and steal data, CERTFA said.

The discovery adds to the public understanding of one of the most complex digital espionage operations in recent memory.

In an interview, Brandon Wales reflected on the “blind spots” in federal defenses exploited by the hackers.

Others echoed Warner’s accusation.

The Justice Department joins a growing list of formally confirmed victims in the espionage campaign.