5 ms·
Why is a country relevant in this context?
by tamersalama 11y ago
Why is a country relevant in this context?
- deleted 11y ago[deleted]
- toxican 11y agoWhy wouldn't it be? They found the malware on routers in those countries, and presumably not elsewhere. Should serve as a heads up for owners of those routers in those countries.
- tdaltonc 11y agoKnowing who's been targeted can help you figure out who's doing the targeting.
- takee 11y agoWho do you think is the common enemy of Ukraine, the Philippines, Mexico, and India?
- jayess 11y agoOne doesn't need to be an enemy to be a target of surveillance.
- tdaltonc 11y agoI think that probably only one of them is the enemy. Stuxnet, for example, hit computers in half a dozen countries but only deeply penetrated in Iran (by design). So two of the countries might be collateral or they might be deliberate misdirection. The target could also be a non-state actor with a distribute presence.
- dguido 11y agoI think to show that it's more than an isolated incident. This is not a piece of research malware that was only deployed in a lab or got picked up on a fileshare. It was found, deployed and operating, on many routers. It alludes to a systematic effort to use this capability, so you probably should take steps to do something about it.
- malfist 11y agoBecause it's likely a state did this. > In an interview with Reuters, FireEye CEO Dave DeWalt said, "That feat is only able to be obtained by a handful of nation-state actors." In any event, there's no doubt that the devices were infected by a professionally developed and fully featured backdoor.
- pyvpx 11y agothis presentation says as much, but the techniques have been widely known for...ever. yes, most likely the only group with the will power and means is a government, but it certainly doesn't _have_ to be. http://www.phenoelit.org/stuff/FX_Phenoelit_25c3_Cisco_IOS.pdf http://www.phenoelit.org/stuff/FX_Phenoelit_25c3_Cisco_IOS.p...
- mhurron 11y agoThat piece of information lends support to it being a highly focused attack and not one that you should start expecting to show up everywhere.