Slashdot Mirror
Kaspersky Explains Why They Won't Say Who Hacked Them
New submitter ChannelGonzo writes: Larry Walsh at Channelnomics scores the scoop in a Q&A with Kaspersky's Chris Doggett who says it's not the Russian security company's job to figure out who is responsible for a sophisticated cyber attack on its corporate network over the past few months. "We believe that to go beyond our area of expertise and speculate on the possible sources of attacks is not in the best interest of our customers," Doggett said.
Russians did it.
Buck Feta. You know what to do.
We wont say, because if we do, we'll look bad.
Your hair look like poop, Bob! - Wanker.
Well, sometimes you can say somethings by saying "i won't say"... i think many of us can understand that they already said who they think those who hacked them were - i understand that as an international company they try to avoid any nationalistic references because it is really bad for business, especially when most of your clients will consider it as an attack to them personaly.
Antisthenes: "Wisdom begins by examining the words/names." - excuse my English, i am (slightly...) better with my Greek!
They wont say because if they do they will all have mysterious 'accidents'....just like happened to Putin's enemies in the past. http://www.cnn.com/2015/03/03/... http://www.theglobeandmail.com... http://www.businessinsider.com...
Obviously it's for reasons which have nothing to do with the truth being embarrassing.
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
again?
Where are we going and why are we in a handbasket?
that it is obvious the Republicans did not do it. They lie constantly. Constantly. And, they hate technology and are incapable of comprehending it. That is proof it is not the Republicans despite what they claim.
Maybe Kaspersky should ask the American Federation of Government Employees. They seemed to have developed quite the expertise in cyberhacking.
http://www.forbes.com/sites/katevinton/2015/06/11/federal-union-says-opm-data-breach-hit-every-single-federal-employee/
i would be shocked if NSA weren't involved.
Clearly they do a lot of business in Israel. Plus the fear being called antisemetic.
You analysis of the article seems flawed. They say pretty clearly that they don't reveal information that might hamper criminal investigations, and that they are talking to authorities in the appropriate jurisdictions.
tl,dr? THEY CANT SAY BECAUSE, COPS ARE DOING COP STUFF.
HA! I just wasted some of your bandwidth with a frivolous sig!
What was once a rising star, burned too fast, now fades into the ether with Nortons.
A security company that doesn't investigate the ins and outs of cyber crime is no security company worth supporting.
Kaspersky has been seeing a steady decline over the last year or two and this just adds to the slippery slope they are most assuredly traversing.
People were poopooing the virus, but I think that's because they didn't read the report.
This is a highly sophisticated polymorphic virus using multiple forms of encryption in multiple layers against multiple attack vectors. It's really a piece of work. I don't know why someone would write it and then use it directly against Kaspersky but whoever did it had the cash to hire some very clever people, or was a team of programmers with a genius at the helm and amazing opsec.
Considering the sophistication of the virus I think it would be silly to speculate about who wrote it: whoever it is had to spend a good deal of effort covering their tracks and could easily have compromised multiple third parties just to create red herrings.
If video games influenced behavior the Pac Man generation would be eating pills and running away from their problems.
Deadmanswitch #46df952185c72ba721acec12875672c4b91634fb
1. they don't know. 2 they don't care. 3. they like it.
Given that Kaspersky plays a major role in Russia's cyber security, attacking them brings some very nasty players to the table. And those guys probably already know who (meaning people, not just country) did that. I mean, common. We, software folk, we think of honey pots, owned c&c servers, connection tracing etc. But really... There are only so many places where this can come from - it's easier to monitor the usual suspects (e.g. Rafael Advanced Defence Systems) then to try to untangle all those encrypted multi-hop connections. (And by "monitor" I don't mean just their network.) Because it does not matter how smart those developers are, there is always an idiot in their chain of command. Additionally, Duqu’s people another major problem is that they are waaay too active. And M.O. is too predictable...
Clearly they do a lot of business in Israel. Plus the fear being called antisemetic.
MY GOODNESS are you implying that Israel might be behind this? What? Are you ANTISEMITIC?????
In the free world the media isn't government run; the government is media run.
that it is obvious the Democrats did not do it. They lie constantly. Constantly. And, they hate true liberty and are incapable of comprehending it. That is proof it is not the Democrats despite what they claim.
If I do it standing up, I am "safe", right?
This issue is a bit more complicated than you think.
There a firms who are paid millions to do that for a single customer. Kaspersky is probably just afraid, and I don't blame him. If encryption is made illegal, I'm sure antivirus won't be far behind.
Announcing to the world that you've been infiltrated by Mossad is a decision that must be weighed by some enormous number of calculated steps.
If you're correct, you will be accused of being anti-Semitic.
If you're wrong, you will be accused of being anti-Semitic.
The only winning move is not to play.
Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
I read the report and they were clear without saying directly.
1. From compile dates the office work week was Sunday to Friday.
2. There was much less activity on Friday and no activity on Saturday.
3. The time zone was UTC+2 hours
That is code for Israel. They could not be any clearer withut saying it directly.
...is basically what they're saying. And they're right, they're not cops, they're not investigators. They're a software company.
THAT SAID:
From what I can gather, the "hack" was in the form of a highly complex payload which used multiple vectors. This isn't script kiddy stuff, this is planned and executed with a LOT of money behind it. Less likely to be a disgruntled employee or a pissed off customer, more likely to be a state player or rival with knowledge of the network. They might start by discussing with the police, the identities of those outside the company that the employees from the Directors to the janitors talk to about work, then run backgrounds on those people. I would not be too surprised (though the evidence is currently lacking to back up my position) if this were the work of British or American foreign intelligence - DoD, CIA or MI6. I don't think the FSB would be up for this since it's a Russian company with clear access to computers all over the world by simple virtue of the ubiquitous nature of its software. It wouldn't make the GRU very happy to suddenly find a potential backdoor to millions of computers suddenly slammed shut by a sister agency. Who else? Israel? I doubt it, what motive would they have? Besides, they're too busy killing Palestinians. Though looking at the Wired article, it would appear that suspicion is heavily on Israel with the toolkit being identified - and sharing a lot of common code - as a Duqu derivative with some Stuxnet code in there as well, which they're calling Duqu 2.0. This article does not agree with the one referenced in TFS, in that Kaspersky is reported to not actually know how much data has been stolen but they do know it's a significant amount and specific in nature.
Political debates have me rolling my eyes so much I think I got optical whiplash. I should sue. - Foamy The Squirrel
they won't say because.... They don't want to be killed by US agents.
Kaspersky Lab headquarters is in Moscow, so its the Russian FSB (the KGB successor) that they fear.
I'm waiting for the day when Kaspersky turns into a false flag operation, when their anti-malware software update includes FSB or Russian military malware. Hmmm, actually I'm not waiting for that day, the Russian gov't wouldn't take such a drastic step short of a WW3 is imminent scenario. But the point is Kaspersky is in Moscow, when the gov't knocks on their door and issues orders they will most likely *not* do a TrueCrypt style canary followed by a shut down. They will most likely quietly comply.
We all know who it was. You're getting owned.
Sucks.
But in other words, it doesn't know. It's all smoke and mirrors, with a placebo effect. If it can't keep the bad guys out of its systems, do you REALLY think it can keep them out of yours?
VOTE NO!
Join the darkside. Be one of us.
all butthurt nao
if the windows kernel had been developed in a memory safe language, the exploit usef here would not have worked.
rust, swift and sappeur to the rescue !
They don't know.
NSA
They already look stupid and clueless anyway.
Were the update servers compromised?
The target could have been one or more customers.
Given the advanced nature of what has been found,
customer clean-up might be very difficult.
--
When you think the trick is happening, it's already been done.
I don't see what shooting black people has to do with any of this.
It was probably the Russian government, and thy don't want to say that, and end up tortured for the rest of their lives.
Omerta
... how quick are you at pulling out an ethernet cord?
How to marginalize themselves as a company in just one small statement. I think they take the prize. Yea, we don't care. As if.
ZING! well played, sir!
HA! I just wasted some of your bandwidth with a frivolous sig!
They are dealing with an extra-legal entity who doesn't have to answer to courts or legislators. FSB, NSA. Who cares what three letters they go by. They have guns and assasins on staff. And no need to answer to anyone else.
I don't expect any corporate officers at Kaspersky (or any other company) to die for the security of my PC.
Have gnu, will travel.