4 ms·
Why would they use more sophisticated tools than required? There are no style points to be had.
by kryptiskt 10y ago
Why would they use more sophisticated tools than required? There are no style points to be had.
- tptacek 10y agoIt's not about style, it's about ease of detection and circumvention. The marginal cost of using tools that don't have the flaws of a userland DLL injector is zero.
- rasz_pl 10y agoAttribution is one. In your own words leaked techniques are so primitive they simply cant be the stuff CIA is using, ergo _You_ personally wouldnt attribute this primitive piece of malware DLL injecting itself into a random text editor as state actor attack = success.
- yaur 10y agoIt's not. Every time you use a tool its an opportunity for it to be detected and if you are going to lose one it would be better for it to be one that you don't care about that much.
- jameskegel 10y agoOne must not cast a bigger bet but a better one.