4 ms·
Also this part from WSJ article remains: "For many months, U.S. intelligence agencies studied the software and even set up controlled experiments to see if the
by r721 9y ago
Also this part from WSJ article remains:
"For many months, U.S. intelligence agencies studied the software and even set up controlled experiments to see if they could trigger Kaspersky’s software into believing it had found classified materials on a computer being monitored by U.S. spies, these people said. Those experiments persuaded officials that Kaspersky was being used to detect classified information."
https://www.wsj.com/articles/russian-hackers-scanned-networks-world-wide-for-secret-u-s-data-1507743874 https://www.wsj.com/articles/russian-hackers-scanned-network...
- londons_explore 9y agoAs a spy agency, this is how you put the middle finger up to a a remote spy agency. You report their malware to an antivirus database. It's basically saying 'ha ha, we caught you, and now the whole world can look at what you were up to'. Presumably, the NSA will have automated monitoring tools scanning every bit of AV software and AV databases looking for any of their own tools there, so they know right away when someone has publically outed them. I wouldn't be surprised if these weren't even hooked up to automated self-removal logic so that NSA malware could remove itself in seconds worldwide if an AV database were updated to detect it.