Researchers Tie Regin Malware To NSA, Five Eyes Intel Agencies

Posted by timothy on Tuesday January 27, 2015 @01:51AM from the which-wolves-and-which-sheep dept.

Trailrunner7 writes Researchers at Kaspersky Lab have discovered shared code and functionality between the Regin malware platform and a similar platform described in a newly disclosed set of Edward Snowden documents 10 days ago by Germany's Der Spiegel. The link, found in a keylogger called QWERTY allegedly used by the so-called Five Eyes, leads them to conclude that the developers of each platform are either the same, or work closely together. "Considering the extreme complexity of the Regin platform and little chance that it can be duplicated by somebody without having access to its source codes, we conclude the QWERTY malware developers and the Regin developers are the same or working together," wrote Kaspersky Lab researchers Costin Raiu and Igor Soumenkov today in a published report. (Here is the Spiegel article.)

1 of 95 comments (clear)

Min score:

Reason:

Sort:

It was known before.. by Anonymous Coward · 2015-01-27 02:06 · Score: 4, Informative

According to this article, Regin has been known for some time.
Fox IT, which was hired to remove Regin from the Belgian phone company Belgacom's website, didn't say anything about what it discovered because it "didn't want to interfere with NSA/GCHQ operations."