If you’re using a compromised version of the Orion Platform:
Immediately isolate, disconnect, or power down infected systems
Review logs to identify command-and-control activity or lateral movement from infected systems
Reset all credentials used by SolarWinds Orion and associated services
Update Orion to the latest version, according to this advisory
Determine whether you’re running any other affected SolarWinds products listed in the advisory Learn more.