Slashdot Mirror
Hackers Behind Breach at Hotel Group Marriott Left Clues Suggesting They Were Working For Chinese Government Intelligence Gathering Operation, Report Says (reuters.com)
Marriott said last week that a hack that began four years ago had exposed the records of up to 500 million customers in its Starwood hotels reservation system. Private investigators looking into the breach have found hacking tools, techniques and procedures previously used in attacks attributed to Chinese hackers, Reuters reported, citing three sources who were not authorized to discuss the company's private probe into the attack. From the report: That suggests that Chinese hackers may have been behind a campaign designed to collect information for use in Beijing's espionage efforts and not for financial gain, two of the sources said. While China has emerged as the lead suspect in the case, the sources cautioned it was possible somebody else was behind the hack because other parties had access to the same hacking tools, some of which have previously been posted online.
Marriott got hacked due to the incompetence of their CIO and IT department. Simple as that. Blaming the $current_badguy is just deflecting blame away from where it belongs.
What is the probability that they were just Russian hackers pretending to be Chinese hackers?
One of the network engineers found pee pee in his Coke...
Ok. So you mean this guy: Bruce Hoffmeister. He's been there for over 7 years.
http://news.marriott.com/p/bru...
https://www.linkedin.com/in/br...
Frankly, it's all Greek to me.
Worse, it doesn't mean anything, except say that the speaker is an idiot who takes his listeners to be idiots, too.
Didn't we read about NSA tools that drop Chinese and Russian "clues" into binaries to provide false attribution.
If anything those groups are smart enough to not leave those traces, so this was likely the NSA doing this by my logic.
They are both bad actors, just turn off all internet connections to the US from Russia on Thursdays and China on Fridays. And keep expanding the time-out one day a week till the problem goes away. Sure it won't stop hackers from working through other countries, and their would be workarounds with proxies in other countries, but the colossal inconvenience of it as collective punishment for the whole country will spur the state-sponsored attacks to become too costly.
The internet is already heading for Balkanization between the great firewalls, the death of net neutrality, and the potential bifurcation of ICAAN's root domains, so nothing will be lost by this lesser move.
If the comeback you want to post is "well the US does it to", then great, maybe the US will also see some value in not doing it too.
Some drink at the fountain of knowledge. Others just gargle.
have the tools to frame any nation for their cyber crimes.
so how can we ever know who is responsible?
since there are no repercussions for data leaks like this, there is nothing to stop Marriott employees (or indeed Marriott itself) from leaving the servers open in exchange for a kickback.
The Chinese have been reading Sun Tzu, Chapter 13 on the use of spies. Little did Sun Tzu know during the time of Plato, that he could simply spy with his fingers, a keyboard, and a $35 Raspberry Pi.
So what's with all of the brouhaha? I don't get it. By the way, What's In Your Wallet? ....specifically the credit card numbers, their expiration date, and CVV code.
If the universe is someone's simulation -- does that mean the stars are just stuck pixels?
"That suggests that Chinese hackers may have been behind a campaign designed to collect information for use in Beijing's espionage efforts and not for financial gain, two of the sources said."
Wouldn't it be easier to just buy the data from Marriott?
If it's someone "looking to cash in" on the data, what are an additional 500 Million (guessing that there is a whole lot of repeat customers in this data set) records worth?
Used to be hard to get enough information for single credit cards, nowadays you would probably have to sell blocks of 10K records for a couple bucks. All these types of hacks are doing is to really devalue the data they are stealing to the point where it's not actually of much value.
Like ching, chong, bing, bong, ding and dong.
It's not the Chinese. I've already gotten the call phishing for my password ("You've won a free vacation at Marriott, give us your password so we can process it.").
The Chinese already know my password, they wouldn't need to phish for it.
Fa ra RA RA RAAAAA ra raaa ra raaah!
Not our lax security. So you can't punish us. Ha ha!
'Clues' were probably left intentionally.
I bet it was like this:
https://www.youtube.com/watch?...
Their security guy stayed at a "Holiday Inn Express" last night.... I guess we all now know why...
"File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
Started after Obama and Xi agreed Sept 25, 2015 not to hack each other? https://www.ft.com/content/0db...
Avoided Starwood the last 2 yrs, since their prior breech.
The naughty hackers left electronic tools and devices back and the investigation has determined that they were all 'made in China'.
What is the probability that they were just Russian hackers pretending to be Chinese hackers?
Probably about the same as you being a Chinese intelligence operative pretending to be some internet doofus who thinks he's smarter than he is throwing shade on "Chinese did it" theory.
I really thought reporting could not be any more biased then it was. But it really is getting pretty bad
Marriott: it's the Chinese we tell ya
Sources: Yah the Chinese , ooooooorrrrr Anyone really because the tools are already out there.
Marriott: So then you're saying the Chinese. Right?
Sources: Yep Chinese.
There are always security breaches and hackers take advantage, this is all. https://downloader.vip/the-pir... https://downloader.vip/yify-yt... https://downloader.vip/rarbg/