Slashdot Mirror


Kaspersky Explains Why They Won't Say Who Hacked Them

New submitter ChannelGonzo writes: Larry Walsh at Channelnomics scores the scoop in a Q&A with Kaspersky's Chris Doggett who says it's not the Russian security company's job to figure out who is responsible for a sophisticated cyber attack on its corporate network over the past few months. "We believe that to go beyond our area of expertise and speculate on the possible sources of attacks is not in the best interest of our customers," Doggett said.

12 of 124 comments (clear)

  1. I say that they say... by antiperimetaparalogo · · Score: 4, Interesting

    Well, sometimes you can say somethings by saying "i won't say"... i think many of us can understand that they already said who they think those who hacked them were - i understand that as an international company they try to avoid any nationalistic references because it is really bad for business, especially when most of your clients will consider it as an attack to them personaly.

    --
    Antisthenes: "Wisdom begins by examining the words/names." - excuse my English, i am (slightly...) better with my Greek!
  2. Duh by penguinoid · · Score: 3, Funny

    Obviously it's for reasons which have nothing to do with the truth being embarrassing.

    --
    Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
  3. NSA by jinchoung · · Score: 5, Insightful

    i would be shocked if NSA weren't involved.

    1. Re:NSA by evilrip · · Score: 3, Informative

      Plenty to gain; Kaspersky is installed all over parts of the world that in high interest and these did find stuxnet out. Probably they decided it was better to use them as access vector instead of a worm that could spin out of control.

      --
      "To err is human, to forgive, beyond the scope of the Operating System"
  4. *sigh* Idiots! The net is so damn full of em...... by TiggertheMad · · Score: 4, Insightful

    You analysis of the article seems flawed. They say pretty clearly that they don't reveal information that might hamper criminal investigations, and that they are talking to authorities in the appropriate jurisdictions.

    tl,dr? THEY CANT SAY BECAUSE, COPS ARE DOING COP STUFF.

    --

    HA! I just wasted some of your bandwidth with a frivolous sig!
  5. Someone with money by Iamthecheese · · Score: 5, Insightful

    People were poopooing the virus, but I think that's because they didn't read the report.

    This is a highly sophisticated polymorphic virus using multiple forms of encryption in multiple layers against multiple attack vectors. It's really a piece of work. I don't know why someone would write it and then use it directly against Kaspersky but whoever did it had the cash to hire some very clever people, or was a team of programmers with a genius at the helm and amazing opsec.

    Considering the sophistication of the virus I think it would be silly to speculate about who wrote it: whoever it is had to spend a good deal of effort covering their tracks and could easily have compromised multiple third parties just to create red herrings.

    --
    If video games influenced behavior the Pac Man generation would be eating pills and running away from their problems.
  6. Re:DUHHHHH by Opportunist · · Score: 5, Funny

    Why not us for a change? Dammit, the Russians and Chinese don't have the monopoly on being able to hack something, ya know?

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  7. Re:Losing faith by Opportunist · · Score: 5, Funny

    Now, now. They fucked up, but that's no reason to start name calling. It's not ok to call a security company Norton. NO matter how much they fucked up.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  8. Re:DUHHHHH by elwinc · · Score: 5, Interesting

    Whoever hacked Kaspersky was probably hunting moles. From the outside, it looks as if Kaspersky has been positively brilliant, revealing state level actors, cracking stuxnet, duqu, & duqu2. But what if some other state level actor had been feeding Kaspersky? What if spies, not security researchers, told Kaspersky where to look? It would be worth a lot for the authors of stuxnet etc to be able to confirm or deny that Kaspersky worked without help. That's the best reason I can see for hacking into Kaspersky.

    --
    --- Often in error; never in doubt!
  9. Internet security is hard... by NotQuiteReal · · Score: 3, Funny

    If I do it standing up, I am "safe", right?

    --
    This issue is a bit more complicated than you think.
  10. Re:Sorry what is their area of expertise by Tablizer · · Score: 5, Informative

    A: Not ticking off Putin.

  11. They Did Say Indirectly by Anonymous Coward · · Score: 4, Interesting

    I read the report and they were clear without saying directly.

    1. From compile dates the office work week was Sunday to Friday.
    2. There was much less activity on Friday and no activity on Saturday.
    3. The time zone was UTC+2 hours

    That is code for Israel. They could not be any clearer withut saying it directly.