Slashdot Mirror

← Back to Stories (view on slashdot.org)

Software Vendor Who Hid 'Supply Chain' Breach Outed (krebsonsecurity.com)

Posted by BeauHD on from the undercover-investigators dept.

tsu doh nimh writes: Researchers at RSA released a startling report last week that detailed a so-called "supply chain" malware campaign that piggybacked on a popular piece of software used by system administrators at some of the nation's largest companies. This intrusion would probably not be that notable if the software vendor didn't have a long list of Fortune 500 customers, and if the attackers hadn't also compromised the company's update servers -- essentially guaranteeing that customers who downloaded the software prior to the breach were infected as well. Incredibly, the report did not name the affected software, and the vendor in question has apparently chosen to bury its breach disclosure as a page inside of its site -- not linking to it anywhere. Brian Krebs went and dug it up. Spoiler: the product/vendor in question is EVlog by Altair Technologies Ltd.

20 of 52 comments (clear)

  1. Product and Vendor by Kunedog · · Score: 5, Informative

    EVlog by Altair Technologies Ltd.

    1. Re:Product and Vendor by GrumpySteen · · Score: 2

      "Incredibly, the summary did not name the affected software"

    2. Re:Product and Vendor by Anonymous Coward · · Score: 1

      Oh noes, you foild slashdots evil plan to have us read throug their ad-ticles without telling us which fucking Vendor and every unholy future spawn of it we should avoid!!

    3. Re:Product and Vendor by Big+Hairy+Ian · · Score: 1

      Throw the book at them by burying this they are as guilty as the hackers who breached them

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

  2. Properly posted in the disused lavatory by Anonymous Coward · · Score: 1

    Got the HHGTTG reference out of the way.

    1. Re:Properly posted in the disused lavatory by TWX · · Score: 1

      Didn't we agree back in the eighties to refer to Douglas Adams' most well-known work as H2G2 or H^2G^2 where superscript is supported?

      --
      Do not look into laser with remaining eye.
  3. Required Douglas Adams quote by Anonymous Coward · · Score: 3, Funny

    “But the plans were on display”
    “On display? I eventually had to go down to the cellar to find them.”
    “That’s the display department.”
    “With a flashlight.”
    “Ah, well, the lights had probably gone.”
    “So had the stairs.”
    “But look, you found the notice, didn’t you?”
    “Yes,” said Arthur, “yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying ‘Beware of the Leopard.”

    1. Re:Required Douglas Adams quote by __aaclcg7560 · · Score: 2

      "Yes," said Arthur, "yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying âBeware of the Leopard."

      That would explain why managers at my government IT job hide surplus computer equipment in the women restrooms.

    2. Re:Required Douglas Adams quote by __aaclcg7560 · · Score: 1

      There should be plenty of space for surplus computer equipment in that storeroom which you personally cleared and which nobody had seen the floor of for years and which you're always telling us about.

      That was when I did a PC refresh project for a local hospital in 2013.

    3. Re:Required Douglas Adams quote by __aaclcg7560 · · Score: 1

      That was when I did a PC refresh project for a local hospital in 2013.

      My bad. Local hospital was in 2012. I was at Cisco in 2013. I've been at my current government IT job since 2014.

    4. Re:Required Douglas Adams quote by Anonymous Coward · · Score: 2, Funny

      And yet the lengthy joke fails to mention how he opened a locked filing cabinet.

      The leopard had the key.

    5. Re:Required Douglas Adams quote by ravenshrike · · Score: 1

      Crowbar of course. Sorry, jimmy bar as this is England.

    6. Re:Required Douglas Adams quote by __aaclcg7560 · · Score: 1

      You seem confused so HR will now conduct an audit of your employment history with all your references.

      Check with the Chinese. They have my background investigative case file for my security clearance.

    7. Re:Required Douglas Adams quote by __aaclcg7560 · · Score: 2

      You obviously work for Republican men.

      Uh, no. Except for 4,000 positions appointed by POTUS, government workers are mostly apolitical. We don't talk about politics. We do talk about Saturday Night Live. ;)

    8. Re: Required Douglas Adams quote by dfeifer · · Score: 1

      Hmm, much like a phone system messaging router we have that is 20 feet up under a drop ceiling that had yet another drop ceiling under that which was 10 feet off the ground..

    9. Re:Required Douglas Adams quote by dbIII · · Score: 5, Funny

      That would explain why managers at my government IT job hide surplus computer equipment in the women restrooms

      That makes perfect sense.
      It's an I pee address.

    10. Re:Required Douglas Adams quote by Anonymous Coward · · Score: 1

      Well spotted.

  4. Brian Krebs is awesome, I'm a big fan. by Anonymous Coward · · Score: 5, Interesting

    He's part simple-terms reporter for laypeople, part techie, part detective, part regular guy on the internet. Cheers to Brian for another successful dig!

    I'm really glad he didn't just fold up and go away after the DDOS campaign against him.

    1. Re:Brian Krebs is awesome, I'm a big fan. by cbiltcliffe · · Score: 1

      No, APK doesn't do a hosts file program. APK did a hosts file program. There's a difference. And, while I haven't polled everybody here, I haven't yet had a conversation with anybody who likes and uses APK's program. I, for one, have never even tried it, due to the sheer amount of obnoxious, irrelevant spewage that shows up every time someone posts that APK is a <fill in insult of choice, here>.

      Now, the fact that you're an AC, and supporting APK, leads me to strongly believe that you are in fact APK, posting as an astroturf supporter of yourself.

      Go away.

      --
      "City hall" in German is "Rathaus" Kinda explains a few things......
    2. Re: Brian Krebs is awesome, I'm a big fan. by Anonymous Coward · · Score: 1

      I wonder when Malware Bytes sues APK to prevent false claims they endorse APK, rather than an employee working on his personal time.