Slashdot Mirror
'Vigilante Hackers' Strike Routers In Russia and Iran, Reports Motherboard (vice.com)
An anonymous reader quotes Motherboard:
On Friday, a group of hackers targeted computer infrastructure in Russia and Iran, impacting internet service providers, data centres, and in turn some websites. "We were tired of attacks from government-backed hackers on the United States and other countries," someone in control of an email address left in the note told Motherboard Saturday... "We simply wanted to send a message...." In addition to disabling the equipment, the hackers left a note on affected machines, according to screenshots and photographs shared on social media: "Don't mess with our elections," along with an image of an American flag...
In a blog post Friday, cybersecurity firm Kaspersky said the attack was exploiting a vulnerability in a piece of software called Cisco Smart Install Client. Using computer search engine Shodan, Talos (which is part of Cisco) said in its own blog post on Thursday it found 168,000 systems potentially exposed by the software. Talos also wrote it observed hackers exploiting the vulnerability to target critical infrastructure, and that some of the attacks are believed to be from nation-state actors...
Reuters reported that Iran's IT Minister Mohammad Javad Azari-Jahromi said the attack mainly impacted Europe, India, and the U.S.... The hackers said they did scan many countries for the vulnerable systems, including the U.K., U.S., and Canada, but only "attacked" Russia and Iran, perhaps referring to the post of an American flag and their message. They claimed to have fixed the Cisco issue on exposed devices in the US and UK "to prevent further attacks... As a result of our efforts, there are almost no vulnerable devices left in many major countries," they claimed in an email.
Their image of the American flag was a black-and-white drawing done with ASCII art.
In a blog post Friday, cybersecurity firm Kaspersky said the attack was exploiting a vulnerability in a piece of software called Cisco Smart Install Client. Using computer search engine Shodan, Talos (which is part of Cisco) said in its own blog post on Thursday it found 168,000 systems potentially exposed by the software. Talos also wrote it observed hackers exploiting the vulnerability to target critical infrastructure, and that some of the attacks are believed to be from nation-state actors...
Reuters reported that Iran's IT Minister Mohammad Javad Azari-Jahromi said the attack mainly impacted Europe, India, and the U.S.... The hackers said they did scan many countries for the vulnerable systems, including the U.K., U.S., and Canada, but only "attacked" Russia and Iran, perhaps referring to the post of an American flag and their message. They claimed to have fixed the Cisco issue on exposed devices in the US and UK "to prevent further attacks... As a result of our efforts, there are almost no vulnerable devices left in many major countries," they claimed in an email.
Their image of the American flag was a black-and-white drawing done with ASCII art.
Part of me wants to cheer and the other part says things like this aren't helping.
This little circle-jerk just closed off viable attack vectors that could have been used in a real defense situation.
Retaliation in 3...2....1.....
You are being ripped off every second of every day, so that advertisers can help rip you off even more tomorrow.
That's also why this is highly unlikely to be NSA. The folks doing intelligence work for government intelligence agencies don't fuck around like this. They go for the throat, and they go hard.
And it's not like it's limited to US. In fact, one of the biggest complaints of FBI doing investigations of Russian for profit hackers was that almost every one they reported on to Russian authorities ended up being recruited for their intelligence apparatus.
Ehhh, not entirely true. You could burn one set of exploits to to test response patterns, especially if you had other unknown hooks in both the systems you hit and at least some of the systems doing the cleanup. That requires you to have an entirely unrelated chain ready to go for part 2 of course. Course, this is relatively unlikely to be the case if a bunch of amateurs are behind it.
Don't kid yourselves, the baddest motherfuckers in the world of computers are employed by governments.
. . . when "The Pros" hack into a system . . . they don't tell anyone about it.
. . . when "The Schmoes" hack into a system . . .they brag about it on Facebook.
One of the oldest rules in the book is that you never let your enemy know that you have compromised them. That way, they will continue to expose valuable information that you can exploit.
If you leave behind an email stating, "You've been hacked!" . . . that's game over for that exploit.
There used to be an ancient joke that "spooky folks" would pass around, that went something like:
"Did you hear the story of the greatest spy coup of all time . . . ?"
"No . . . you didn't . . . and you never will."
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
> to not accept that so many Americans willingly voted for the current president is hiding the head in the sand.
I prefer to think that is was mostly a choice for the lesser evil.
ShanghaiBill, what you said seems reasonable to me. For example, I recently had a very helpful discussion with a Russian immigrant here in the U.S. about the main Russian culture. I've had many discussions with Iranian immigrants. So I think I may have some basic understanding of those cultures.
I'm surprised that other responses to your comment were so negative and so hostile.
Hostile people: Be leaders. Don't be destructive. Use logic, not anger.
I have read your rambling wall-o'-text 3 times.
It made no more sense the third time than it did either of the first two. Which is to say, little or none.
Some review of grammar and punctuation might enable you to *communicate* rather than merely *express*. Seriously.
Il n'y a pas de Planet B.
Wouldn't it be nice if you could be pro-active for once and tell the router makers about all the holes you exploit?
Stupid, the router makers already know about the holes. They're just too languid in their response time to issue a patch. And even worse, admins and infrastructure managers are too slow to apply those patches and replace unpatchable (too old) machines.
There is no America. There is no democracy. There is only IBM and AT&T and DuPont, Dow, General Electric, and Exxon
What really troubles me about this is the choice of image format used to save the screenshot of the ASCII art. Why are people still using JPEG for non-photographic images in 2018?
#DeleteFacebook