Slashdot Mirror
Kaspersky Lab Reveals Cyberattack On Its Corporate Network
An anonymous reader writes: Kaspersky Lab has revealed that it was recently subject to a major cyberattack. The company launched an investigation, which led to the discovery of a new malware platform from Duqu. Kaspersky has revealed that the attack exploited zero-day vulnerabilities and the malware has spread in the network through MSI (Microsoft Software Installer) files. "The attack is extremely sophisticated, and this is a new generation of what is most likely state-sponsored malware," Kaspersky said during the press conference. "It's a kind of a mix of Alien, Terminator and Predator, in terms of Hollywood."
"It's a kind of a mix of Alien, Terminator and Predator, in terms of Hollywood."
So they've just been sitting back and enjoying it, then?
In terms of substance, not so much.
If only they had an antivirus installed.
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
Why aren't they running OpenBSD? It's the only practical operating system to use in truly high-risk, high-security deployments.
DUH! Because Netcraft has confirmed that BSD is dying.
Kasperski must characterize the malware as ultra-advanced, targeted, government hacking. Otherwise they look like fools for being penetrated.
I'm not saying they are lying; I'm saying there is no way to tell, because their success as a company depends on them assuring everyone that they can competently defend against ordinary malware.
"I will trust Google to 'do no evil' until the founders no longer run it." Hello Alphabet.
OpenBSD doesn't run those MSI files worth a darn. Someone should submit a patch
because i don't have time to bleed. all other priorities rescinded.
The real question isnt who attacked Kaspersky, but why Kaspersky still runs a punching bag OS like Windows. One would expect a major security vendor would have hardened everything from the secretaries desktop to the coffee maker.
Good people go to bed earlier.
So they were officially signed with someone's key?
FYI: Here is the link to Kapersky's report of the incident: https://securelist.com/files/2...
What is the new attack like, in terms of Muppets?
Ah, so the Russians tested on themselves before deploying to Germany.
"Most notably, some of the new 2014-2015 infections are linked to the P5+1 events and venues related to the negotiations with Iran about a nuclear deal."
Sounds like Israel is at it again
Why did the attacker sacrificed such a nice tool ? And to obtain what kind of information ?
My hypothesis is that the attackers wanted to retrieve all source code from Kaspersky Labs, in order to prepare future attacks.
I have no doubt that they have the resources to analyze the source code and find some ways to evade Kaspersky's detection.
The most wanted target was probably Kaspersky's internal tools, which are not in the final product, like virus analyzers, detection algorithms, and also how they build their virus signatures.
It's probable that the attackers also wanted to confirm the ties between Kaspersky and the Russian government.
Coming so soon after revealing the NSA spyware in the firmware of hard drive manufacturers, care to wager any guesses over which out-of-control state sponsored this attack?
Good, I wish nothing but hard times for them.
https://grahamcluley.com/2014/...
https://www.youtube.com/c/BrendaEM
They made a big mistake targeting Kapersky as they've given away most of their techniques. It does seem that someone went to an awful lot of trouble creating the malware. The_Mystery_of_Duqu_2_0
I'm with the camp that thinks Israel is behind it. It only makes sense, given their involvement with Stuxnet and their high level of interest in Iran's nuclear program, plus the connection with the Auschwitz liberation date
I beg to differ
My train of thought for this case runs more along the false flag rule, and that if Israel really wants to carry it out wouldn't it at least try to avoid identifying themselves?
The fact that the attack was launched with the Auschwitz liberation date in mind tells us that someone else is behind the scheme --- as the Auschwitz liberation date has a permalink to Israel anyone who wants to frame Israel can do nothing less than to link an attack to that particular date
And apparently it works --- reading the comments here tells us that those aren't equipped with critical thinking skills will automatically associate the attack with Israel
I am no friend of Israel but I do reckon that the Jews are way more clever than that --- if indeed it was Israel which is behind this attack then they will do it in a way that, at the very least, leave enough clues to lead to some other players rather than Israel
The fact that Stuxnet / Duqu was co-developed by Israel and NSA, and this current deployment uses technique that they once deployed back in 2011, indicates to me that NSA is behind it
It is legitimate to ask why NSA wants to mess with systems belong to P5+1 who are connected the Iran nuclear deal, and the answer is no more than who is currently in charge in the White House
They way Obama is behaving, and has been behaving the past 5+ years in the White House tells us that he is a controlling type, that he needs to know everything about everybody
From the NSA spying on the Americans to blaming his favorite bogeyman - China - on the leak of the background info of 4 million American civil servants, even when he didn't even have an iota of evidence, we know full well the one true thing that motivates Obama --- to have a total control, and to manipulate the sentiments of the people so that they will give him full support of whatever he wants to do
You guys are on /. --- by the self-selection prophesy you guys are supposed to be better than the rest of the populace, so, please, it's time to equip yourselves with much better thinking skills
In a world where leaders such as Obama is so skilled in manipulating populace sentiments we must ensure that we ourselves are not being manipulated
Muchas Gracias, Señor Edward Snowden !
So it's like what KGB-Kaspersky does for Putin? I don't think they disclose/filter all the exploits they find. They use the best ones. And a press release like this one is just info warfare. Remember when Kaspersky helped Iran get closer to the atom bomb by helping them mitigate the effects of stuxnet/duqu?
I had never seen a malware analyzed this thoroughly.
the function name at page 39, The typo on page 44, and the list goes on.
They found things you simply can't find in 18 Mega-bytes of executables which should mean like 3 Million SLOC of C code?
I hate windoz, kaspersky, probably russians too, but... well done.
Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion. -- Spazmania (174582)
French-speaking readers will see the wit in the name; DUQU is pronounced in French like DU CUL, which renders roughly as "of an arsehole" :)
...is born every minute. Ever heard of "False Flag" ?
Angela Merkel was all too happen to aid GWB in his Criminal Acts then. Go figure.
This comes out and Christopher Lee kicks it?
Mighty suspicimous...
the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff