Kaspersky Explains Why They Won't Say Who Hacked Them

New submitter ChannelGonzo writes: Larry Walsh at Channelnomics scores the scoop in a Q&A with Kaspersky's Chris Doggett who says it's not the Russian security company's job to figure out who is responsible for a sophisticated cyber attack on its corporate network over the past few months. "We believe that to go beyond our area of expertise and speculate on the possible sources of attacks is not in the best interest of our customers," Doggett said.

Comments

TL;DR

[OverlordQ]

We wont say, because if we do, we'll look bad.

Re:Sorry what is their area of expertise

[Anonymous Coward]

More specifically, security software.
If they don't know how to perform an investigation when security has been breached, then I don't know how they can perform their roles as security experts.

NSA

[jinchoung]

i would be shocked if NSA weren't involved.

Our customers will be pissed if we call them out

[andydread]

Clearly they do a lot of business in Israel. Plus the fear being called antisemetic.

*sigh* Idiots! The net is so damn full of em......

[TiggertheMad]

You analysis of the article seems flawed. They say pretty clearly that they don't reveal information that might hamper criminal investigations, and that they are talking to authorities in the appropriate jurisdictions.

tl,dr? THEY CANT SAY BECAUSE, COPS ARE DOING COP STUFF.

Someone with money

[Iamthecheese]

People were poopooing the virus, but I think that's because they didn't read the report.

This is a highly sophisticated polymorphic virus using multiple forms of encryption in multiple layers against multiple attack vectors. It's really a piece of work. I don't know why someone would write it and then use it directly against Kaspersky but whoever did it had the cash to hire some very clever people, or was a team of programmers with a genius at the helm and amazing opsec.

Considering the sophistication of the virus I think it would be silly to speculate about who wrote it: whoever it is had to spend a good deal of effort covering their tracks and could easily have compromised multiple third parties just to create red herrings.