4 ms·
That's the age old game though. We all know everybody is hacking and spying on everybody else. We only get mad about it when they get caught. Until then, game o
by cronix 8y ago
That's the age old game though. We all know everybody is hacking and spying on everybody else. We only get mad about it when they get caught. Until then, game on.
I find it laughable when the US "attributes" an attack to a foreign power, and the media just laps it up and preaches it as gospel. In the vault-7 release on wikileaks, the NSA has a pretty nifty tool to....manipulate packets to make them look like they are coming from a different source, and insert comments in 4 foreign languages.
We are asked to believe that Russias most talented hackers, somehow are stupid enough to leave comments in Acrylic that mentions the head of the GRU. Yes, I'm sure they did that. Just like our payloads have comments attributing our code to Obama or Trump. The "stolen" emails were "downloaded" at 3x the rate of the internet connection going to the email server. It happens to match the rate of USB2, and most likely a USB stick was used to copy the emails directly from the server.
Here's a talk by Ray McGovern (ex cia), which lays the case out. Don't take his word for it. Research the facts he claims. I kind of poo-poo'd him at first. https://www.youtube.com/watch?v=ngIKjpucQh8 https://www.youtube.com/watch?v=ngIKjpucQh8
Here's an article describing the NSA's "Marble Framework". Go to the vault and look at their own words from the NSA's docs: https://www.washingtonpost.com/world/national-security/wikileaks-latest-release-of-cia-cyber-tools-could-blow-the-cover-on-agency-hacking-operations/2017/03/31/63fc3616-1636-11e7-833c-503e1f6394c9_story.html https://www.washingtonpost.com/world/national-security/wikil...
Vault-7 NSA's "Marble Framework": https://wikileaks.org/ciav7p1/cms/page_14588467.html https://wikileaks.org/ciav7p1/cms/page_14588467.html
- sayno3 8y agoI don't see why anyone would even need to research this. How could someone be so stupid to believe all the "hacking code" made direct cultural references to the source?
- lawnchair_larry 8y agoVault 7 had nothing to do with NSA.
- wp381640 8y ago> somehow are stupid enough to leave comments in Acrylic compilation artifacts and strings in malware - very common method of researching attribution and most tools pull them as IoCs even if you write tools to strip or null them out all it takes is a single OPSEC failure and you've leaked this info, and we see those all the time should also be noted that the build paths was not the only attribution indicator in that case