Equation group is the advanced malware outfit that is suspected to be NSA. The name was given by the group at kaspersky who put the report together. A brief sum

Equation group is the advanced malware outfit that is suspected to be NSA. The name was given by the group at kaspersky who put the report together. A brief summary is found in the linked PDF [0]. False flag is possible, but it's not unreasonable to think that these were uncaught mistakes, just ones that have no functional effect. The Mandiant APT1 report shows a similar pattern of bread crumbs, though in that case they felt more intentional (ego flourishes) to me. As to your final question, that field is reverse engineering. If you're looking for tools, IDA Pro is a very powerful disassembler. [0] https://www.google.com/url?q=https://securelist.com/files/2015/02/Equation_group_questions_and_answers.pdf&sa=U&ved=0ahUKEwjJ_fKglMXOAhXKPRQKHTUUCGcQFggLMAA&sig2=nB6eT90w4zN1LrmSDi5Xcg&usg=AFQjCNFLgaydKOFaXK37eYaafr-kMi6cRw https://www.google.com/url?q=https://securelist.com/files/20...