3 ms·
Kaspersky, as both an security firm and an agent of the Russian state, certainly has the capacity to identify the probable source of APTs. As Slingshot is a US
by unchocked 9y ago
Kaspersky, as both an security firm and an agent of the Russian state, certainly has the capacity to identify the probable source of APTs.
As Slingshot is a US-originated APT deployed against ISIS in Syria and Iraq, and the US is in conflict with the Russian state in Syria, it's a newsworthy question as to what aspect of Kaspersky's job is most relevant here.
- justinjlynn 9y agoUnless the US Military is being extremely careless, attribution of malware is extremely difficult and, aside from leaks, almost impossible to accurately attribute.
- unchocked 9y agoA large security company or a nation state can absolutely attribute malware originating from nation-states (APTs) with a high degree of confidence. We are not talking about some recombinant script kiddie malware: Slingshot is attributable, Stuxnet was attributable, the DNC penetration was attributable. Nation-states with mature cyberwarfare capabilities, and their appendages such as Kaspersky, are routinely capable of identifying the authors of novel malware.