Official blog post (no info on how the attack was performed though): https://www.fireeye.com/blog/products-and-services/2020/12/f...

They’ve also released signatures to detect the use of the compromised tools: https://github.com/fireeye/red_team_tool_countermeasures