6 ms·
CIA created code to impersonate Kaspersky Lab: WikiLeaks
- porfirium 9y agoMere mortals trying to understand the inner workings of intelligence agencies make me cringe. There are no good boys and bad boys here.
- tareqak 9y agoGiven that https://www.scientificamerican.com/article/how-cia-fake-vaccination-campaign-endangers-us-all/ https://www.scientificamerican.com/article/how-cia-fake-vacc... happened as well, this allegation is sadly unsurprising and probably true. Can Kaspersky Lab sue the CIA / the US government for hurting their reputation / business in this manner?
- londons_explore 9y agoSure they can try... Chance of winning in a USA court.. near zero. Chance of winning in a foreign court, high, but they'd never get the payout.
- bearbearbear 9y agoSuing the CIA is like trying to get revenge on a table saw for cutting your finger off by punching feeding the rest of your arm into it.
- 0x0 9y agoWhat's the actual technical thing that happened here? Did they manage to trick Thawte into issuing real SSL certificates for Kaspersky's internet domains?
- liberal_098 9y ago> Did they manage to trick Thawte into issuing real SSL certificates for Kaspersky's internet domains? Most probably something really simple with the goal to trigger some resonance in media when nobody will ask about SSL certificates and then forget about it.
- willstrafach 9y ago> Did they manage to trick Thawte into issuing real SSL certificates for Kaspersky's internet domains? No, that would be huge news. They just created an invalid self-signed certificate with a Kaspersky domain in the CN. This would allow their implant traffic to hide better, as in a program like Wireshark it would just look like a server downloading some anti-virus updates instead of sticking out as a C2 beacon. Check out the source bundle - Same can be done to create self-signed certificates for stealth in other scenarios which may require a different domain name (For example, if the target uses another program such as Chrome which periodically contacts a server to fetch automatic updates, it would use the domain of that server). There is no significance of Thawte, other than being the CA which Kaspersky uses. This is to be expected, as the self-signed certificates are naturally going to need to look like the originals, only differing in keys of course.
- jasonmaydie 9y agoHere comes Wikileaks to the Russia Rescue again. Their reputation is shot afaik
- codinghorror 9y agoHow is wikileaks a credible source these days? https://www.wired.com/2016/07/wikileaks-officially-lost-moral-high-ground/ https://www.wired.com/2016/07/wikileaks-officially-lost-mora...
- btilly 9y agoThe fact that you don't like what they do doesn't mean that they don't accurately report on the information that they receive.
- willstrafach 9y agoThey don't, though. Their reporting and editorializing of leaks has been inaccurate quite a few times. That said, there is no evidence indicating the content of their leaks isn't genuine, so it is probably best to look at the leaked content itself rather than the analysis WL writes alongside the leaks.
- empath75 9y agoIt’s easy to create a false impression with selective releases of information. I’ll note that Wikileaks has published absolutely nothing from the fsb.
- codedokode 9y agoMaybe FSB has less technologies to leak or less people willing to do so.
- petraeus 9y agoGood for them?
- deleted 9y ago[deleted]
- pleasecalllater 9y agoIf this is true, the future will be sad. The next time someone will discover a real problem, people will ignore it.
- ireallydonot 9y agoWho trust CIA after all that they lied to us ? - I dont