Mikko Hypponen's Malware Odyssey
CowboyRobot writes "Security expert Mikko Hypponen talks about his experience at F-Secure, including adventures such as flying to Lahore to interview the creators of 'Brain,' one of the early computer viruses that was spread manually on floppy disks. But while the early virus creators were just trying to have fun and learn, modern malware makers are motivated only by money. 'But there's a misconception that they all necessarily make a lot of money. There's a hierarchy of workers, with some just making a few hundred dollars to $1,000 doing the dirty work of the more experienced online criminals who make the real money.'"
"Security expert and notorious self-promoter Mikko Hypponen"
"modern malware makers are motivated mainly by money, just as most of the antivirus industry, including F-Secure".
The 1337 h4x0rz in big black "fuck me" boots and bizarro makeup jobs.
Or has Hollywood been lying to me again?
Some malware these days is militarily and politically motivated too.
What political party do you join when you don't like Bible-thumpers *or* hippies?
Surely there's one or two still left doing it for education, to prove a point, or just for the LULZ.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Spending $BIGBUCKS on Stuxnet may be cheaper than spending $BIGGERBUCKS getting rid of Iranian nuclear ambitions the old fashioned way and certainly cheaper than $EVENBIGGERBUCKS of cleaning up after they drop The Bomb on $ALLY.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
"Remember kids, blue collar crime does not pay; and, honestly, most of the lower rungs of white collar crime are only classified that way so that they can keep you on salary rather than pay overtime and don't pay all that well either."
Hacking requires at least 5 monitors to do correctly... That cannot be cheap.
zero money spent. non zero money comming in.
All profit.
Just like spam.. Oh sure only 1-3% of people fall for spam.. But when you send out a billion emails for free. 2% is alot of cash even at pennies each.
I'm still sure if we stopped giving them jobs after minor punishment....
And instead started setting malware authors on fire. And spammers. On pay per view.
It would stop eventually. Or at least be real entertaining. And profitable.
It always runs on drones who are getting screwed over, even when the business is screwing over other drones.
It looks like a description of the way every communication network functions and has since the '70s.
You discover when you look at it that it doesn't escape normal economic rules, in that the lower tier people doing menial work don't make tons of money, they make low wages. Even at the higher end it really doesn't pay that well, comparatively. You look at the drug lords and say "Wow those guys have a lot of money," but realize it is very few of them. then compare them to their legit rivals, the top tier businessmen like Gates, Buffet, Bezos, and so on, and they really don't compare all that well.
Crime ultimately ends up being just another kind of business.
If stupid people would quit clicking on stupid things.
"viruses that was spread manually" ... There have been a few manual viruses, notably Good Times, and The Honor System Virus, but I'm pretty sure Brain was automatic.
It's sad that we've gotten to the point where anything short of an outright worm is considered "manual".
Hypponen's security must-haves: A nifty tool, which is not ours but which I'd like to recommend, is Flag for Chrome or the Firefox equivalent, Flagfox. It's a handy extension, which shows a flag in the URL bar of the browser, indicating the country where the website is hosted. This comes handy in more cases than you'd think.
lol
Contrary to the popular belief, there indeed is no God.
Some malware these days is militarily and politically motivated too.
Surely you understand that the primary military and political motivator is money... everything else is smoke and mirrors.
Since nobody seems to notice, just wanted to mention that Lahore is in Pakistan. The two brothers allegedly did it to protect their program from being pirated. Whats noteworthy is that they even left their names and contact address, so the victim can contact them to clean up if he/she wants. The message that would appear said: "Welcome to the Dungeon © 1986 Basit * Amjad (pvt) Ltd. BRAIN COMPUTER SERVICES 730 NIZAM BLOCK ALLAMA IQBAL TOWN LAHORE-PAKISTAN PHONE: 430791,443248,280530. Beware of this VIRUS.... Contact us for vaccination..." The two brothers, are still running their own business "Brain Telecommunication Limited" in Pakistan.
> adventures such as flying to Lahore to interview the creators of Brain, first computer virus ever
May have been a cover story. Lahore, Pakistan is a place quite near another nation, a rogue country, whose nuclear weapons effort was so much damaged by super advanced mil-malware. If one wants to look at that code on-site, it is easy to cross from Lahore into the rogue on smugglers' donkeys, without any border passport records. On the other hand it is silly to assume such passes are not monitored by UAVs and NRO satellites. Pakistani skies are brim full of CIA drones.
""Security expert and notorious self-promoter Mikko Hypponen" "modern malware makers are motivated mainly by money, just as most of the antivirus industry, including F-Secure"." - by brennz (715237) on Wednesday September 19, @08:12PM (#41394357)
Who isn't motivated by ANYTHING since he hasn't done shit himself to help out the problem in malware out there online or otherwise... right? Bet I am!
* I don't even KNOW you, but I dislike your attitude immensely, for what it is - trolling!
QUESTION:
---
What have YOU ever done that helped others vs. the malware-in-general threat out there, hmmm?
---
(Fact is - I'd almost be willing to BET you haven't done a damned thing yourself based on your thoughts you posted that I quoted above...)
APK
P.S.=> Know what I absolutely *HATE*? Trolls & complainers that don't do shit but "talk" (troll) against others that do... & please - DO ANSWER THE QUESTION ABOVE!
... apk
I was onto THAT, years ago (and before that too): It's PROS out there "hacking/cracking" into you, not just "kids having fun" etc./et al:
"Well, nowadays, they're not just after "wrecking your rig" etc. et al, they're after YOU... mainly your cash, or credit, etc. et al (it's now a "money game" man, the serious kind, really)."
FROM -> http://www.pcreview.co.uk/forums/secure-windows-2000-xp-server-2003-and-even-vista-make-fun-do-t3511888p5.html
* Fact is, I was "at this game" (computer security) LONG BEFORE there really WAS a "formal industry" in it... & did my 1st collegiate academia presentation on it, as far back as 1984
(Some proof's below in my p.s. on a few levels in fact!)
APK
P.S.=> SO, as I said above: Things I personally have done around the arena of computer security on a PC?
The guide I quoted from above is featured ALL OVER THE PLACE online & it actually works (here's some testimonials from a user that applied it TO THE LETTER for himself, friends, family, & even paid customers):
To "immunize" a Windows system, I effectively use the principles in "layered security" possibles!
http://www.bing.com/search?q=%22HOW+TO+SECURE+Windows+2000%2FXP%22&go=&form=QBRE
I.E./E.G.-> I have done so since 1997-1998 with the most viewed, highly rated guide online for Windows security there really is which came from the fact I also created the 1st guide for securing Windows, highly rated @ NEOWIN (as far back as 1998-2001) here:
http://www.neowin.net/news/apk-a-to-z-internet-speedup--security-text
& from as far back as 1997 -> http://web.archive.org/web/20020205091023/www.ntcompatible.com/article1.shtml which Neowin above picked up on & rated very highly.
That has evolved more currently, into the MOST viewed & highly rated one there is for years now since 2008 online in the 1st URL link above...
Which has well over 500,000++ views online (actually MORE, but 1 site with 75,000 views of it went offline/out-of-business) & it's been made either:
---
1.) An Essential Guide
2.) 5-5 star rated
3.) A "sticky-pinned" thread
4.) Most viewed in the category it's in (usually security)
5.) Got me PAID by winning a contest @ PCPitStop (quite unexpectedly - I was only posting it for the good of all, & yes, "the Lord works in mysterious ways", it even got me PAID -> http://techtalk.pcpitstop.com/2007/09/04/pc-pitstop-winners/ (see January 2008))
---
Across 15-20 or so sites I posted it on back in 2008... & here is the IMPORTANT part, in some sample testimonials to the "layered security" methodology efficacy:
---
SOME QUOTED TESTIMONIALS TO THE EFFECTIVENESS OF SAID LAYERED SECURITY GUIDE I AUTHORED:
http://www.xtremepccentral.com/forums/showthread.php?s=672ebdf47af75a0c5b0d9e7278be305f&t=28430&page=2
"I recently, months ago when you finally got this guide done, had authorization to try this on simple work station for kids. My client, who paid me an ungodly amount of money to do this, has been PROBLEM FREE FOR MONTHS! I haven't even had a follow up call which is unusual." - THRONKA, user of my guide @ XTremePcCentral
AND
"APK, thanks for such a great guide. This would, and sh
"Speaking of self-promotion..." - by Anonymous Coward on Thursday September 20, @11:25AM (#41399901)
See subject-line above: That's all (which my 2nd post here is merely PROOF of MY PERSONAL PARTICIPATION in this area, computer security - since unlike yourself, I can BACK UP MY STATEMENTS about actually *trying* to help out in the arena of computer security, that's all)...
* So, again: Answer the question I asked in my 1st post:
QUESTION:
---
What have YOU ever done that helped others vs. the malware-in-general threat out there, hmmm?
---
Answer that...
APK
P.S.=> You not answering my question BRENNZ (and yes, I know you're replying as AC now)? Says it all... proving my assumptions about YOU, correct in fact!
Thanks for making ME, correct... as usual, lol, especially about TROLLS!
... apk
Sorry to be offtopic, but: I know that TFA is to blame here, but it's Hyppönen, not Hypponen. I wonder if even the Olympics got it right this year. It's not even about charsets anymore, so I guess nobody just ever puts in characters that aren't on their keyboards. Kind of unprofessional journalism, I'd say.
"Oh, this is fun! I'm not Brennz at all!" - by Anonymous Coward on Monday September 24, @05:01PM (#41442703)
Yea, "right" ( "You're AC as well." - by Anonymous Coward on Monday September 24, @05:01PM (#41442703)
LMAO - "Oh, SURE" brennz: We KNOW you have the option to reply as ac too...
---
"But thanks for aligning me with someone who was smart enough to get you annoyed." - by Anonymous Coward on Monday September 24, @05:01PM (#41442703)
See subject-line above, & of course, the question in my 'p.s.' below as well (& DO *TRY* to answer it, instead of avoiding it, won't you?)
---
"Your posting manner is off-putting enough that we the people of Slashdot find you offensive" - by Anonymous Coward on Monday September 24, @05:01PM (#41442703)
Funny, but, here are MANY instances of your /. peers showing they feel otherwise (via this partial list of my upward moderated posts vs. your b.s.):
---
Roughly 220++ of them & I post as AC (hard to get even +1, as /. hides our posts & we "AC"'s start @ ZERO/0 points, unlike registered "lusers", lol!):
+5 'modded up' posts by "yours truly" (6):
HOSTS & BGP:2010 -> http://tech.slashdot.org/comments.pl?sid=1901826&cid=34490450
FIREFOX IN DANGER: 2011 -> http://news.slashdot.org/comments.pl?sid=2559120&cid=38268580
TESLA:2010 -> http://science.slashdot.org/comments.pl?sid=1872982&cid=34264190
TESLA:2010 -> http://tech.slashdot.org/comments.pl?sid=1806946&cid=33777976
NVIDIA 2d:2006 -> http://hardware.slashdot.org/comments.pl?sid=175774&cid=14610147
COMPUTER ASSOCIATES BUSTED FOR ACCOUNTING FRAUD:2010 -> http://news.slashdot.org/comments.pl?sid=1884922&cid=34350102
----
+4 'modded up' posts by "yours truly" (5):
APK SECURITY GUIDE:2005 -> http://developers.slashdot.org/comments.pl?sid=167071&cid=13931198
INFO. SYSTEMS WORK:2005 -> http://slashdot.org/comments.pl?sid=161862&cid=13531817
WINDOWS @ NASDAQ 7++ YRS. NOW:2009 -> http://tech.slashdot.org/comments.pl?sid=1290967&cid=28571315
CARMACK'S ARMADILLO AEROSPACE:2005 -> http://science.slashdot.org/comments.pl?sid=158310&cid=13263898
What I admire about Theo DeRaadt of BSD fame: 2012 -> http://linux.slashdot.org/comments.pl?sid=3007641&cid=40785151
----
+3 'modded up' posts by "yours truly" (6):
APK MICROSOFT INTERVIEW:2005 -> http://developers.slashdot.org/comments.pl?sid=155172&cid=13007974
APK MS SYMBOLIC DIRECTORY LINKS:2005 -> http://it.slashdot.org/comments.pl?sid=166850&cid=13914137
APK FOOLS IE7 INSTALL IN BETA HOW TO:2006 -> http://slashdot.org/comments.pl?sid=175857&cid=14615222
PROOFS ON OPE