3 ms·
That was an email with a malicious attachment that appeared legit which did nothing obvious to compromise the system. Podesta got an email saying that "someone
by Natsu 10y ago
That was an email with a malicious attachment that appeared legit which did nothing obvious to compromise the system.
Podesta got an email saying that "someone has your password" and pointing at the IP Address: 134.249.139.239, allegedly in the Ukraine[1].
I can see your point, but one attack is a lot quieter than the other. The usual goal is that they don't know they've been compromised so you retain access over a long period of time, rather than triggering all the alarms.
[1] https://wikileaks.org/podesta-emails/emailid/34899 https://wikileaks.org/podesta-emails/emailid/34899
- nl 10y agoSure, there different levels of phishing, depending on the sophistication of the opposition. The GCHQ attacks on Belgacom[1] had a phishing component, but I suspect most people here would have fallen for them too. [1] https://theintercept.com/2014/12/13/belgacom-hack-gchq-inside-story/ https://theintercept.com/2014/12/13/belgacom-hack-gchq-insid...
- Natsu 10y agoI'm having trouble finding the phishing there? There's a mention of QUANTUM INSERT replacing pages with malicious copies, but that appears to be a man-in-the-middle attack of some kind unless I'm completely misreading it. It also took them quite long to figure out what was going on.
- nl 10y agoYes, you are probably right. I mis-remembered it as a spearphishing attack using a fake LinkedIn login. Technically I guess it kind of is a fake LinkedIn login, but I think I'd be stretching the definition a fair bit...
- Natsu 10y agoFair enough. Have an upvote for giving me some interesting reading, though!