3 ms·
The problem with relying upon motive and established MO exclusively is that anyone is therefore capable of framing whomever they like. This is the next generat
by elif 10y ago
The problem with relying upon motive and established MO exclusively is that anyone is therefore capable of framing whomever they like.
This is the next generation of warfare, attribution is simply impossible. Even if there existed actual forensic evidence it could not be relied upon.
Reacting to purported attacks at face value will leave you like a 1-layer chess player, potentially acting on behalf of your adversary.
- lern_too_spel 10y agoAs I said above, the attribution does not rely solely on motive. All private security firms that analyzed the attack have attributed it to Russia, and they would not stake their reputations on such a flimsy argument.
- unclepresent 10y agoall private security firms ? name one, please
- lern_too_spel 10y agoI named three in my first comment above. There are also Mandiant (FireEye) and SecureWorks. Previous attacks with the same malware were attributed to Russia by Threatconnect and Microsoft, who calls the "Fancy Bear" group "Strontium."
- deleted 10y ago[deleted]