3 ms·

I recommend Dave Aitel's explanation of the hack (link below). https://cybersecpolitics.blogspot.com/2016/08/why-eqgrp-leak-is-russia.html https://cybersecpolit

• rdtsc 10y ago
  > Information results from HUMINT, not simple hack of a C2 box as suggested (not that even that would be easy). Level of difficulty: Very Experienced Nation State. I don't get his reasoning why it necessarily has to be HUMINT. State actors from other countries can find 0-day exploits presumably. Don't think it was that outrageous they could have hacked into a c2 server. People who do the work at NSA (assuming it is) are not necessarily super-wizzards or automatically better equipped at defending against an attack. They were most likely average developers from the DC area who happen to have clearance and work for Uncle Sam. Because of compartmentalization, those who specialize in attackig specific targets (firewalls) might not necessarily have the knowledge to secure a server well.