3 ms·
Not really. Very few attacks dedicate enough effort to evasion or anti-forensics to be completely untraceable. There are plenty of things that get reused such
by intern4tional 9y ago
Not really. Very few attacks dedicate enough effort to evasion or anti-forensics to be completely untraceable.
There are plenty of things that get reused such as public keys that can be reliably tied to a group. There are also many private indicators that are not released to the general public Discovering who funds that group or where they operate from can be tougher, but APT groups are trackable.
- 3131s 9y agoRe-using a public key seems like an incredibly basic mistake. How is the chain of custody for digital evidence handled by intelligence agencies and 3rd party researchers? Are there higher standards with regard to digital evidence? It seems to me that with digital evidence, ultimately you at least have to trust the investigatory agency at hand. But we're past that, because a huge number of Americans like myself will never trust any information from the US government.