3 ms·
I’m very skeptical that any nation state group is foiled by leaked ip addresses or language identifying strings left in code. Both seem like such obvious red he
by SlowRobotAhead 6y ago
I’m very skeptical that any nation state group is foiled by leaked ip addresses or language identifying strings left in code. Both seem like such obvious red herrings that it makes me question anyone that puts stock in them.
- jdm2212 6y agoWorthing actually reading the article. NSO Group isn't like Cozy Bear -- it's not a code name for an unknown probable nation-state APT. It's an Israeli company that sells hacking tools used by the Saudis (among others). NSO Group was "tied to America" in a legal sense relevant to WhatsApp's lawsuit. There's no implication that it was, like, secretly the NSA or something. Just that this Israeli company rented US-based servers from a US-based company, and this invalidates some legal defenses they're using to fight WhatsApp's lawsuit.
- SlowRobotAhead 6y agoYes, no, I read it. I just don’t think there is a bill of sale for rented servers anywhere that has the recipient as “Elite Nation State Hacker Group”. If the trail is IP address, I trust that as much a “spasibo” being proof of Russian Hackers.
- jdm2212 6y agoNSO Group is not an "Elite Nation State Hacker Group". It's a private Israeli company that sells malware (and apparently malware-as-a-service). If they didn't rent those servers, it would be very easy for them to say to the court "we did not rent those servers, our clients did". Notably, they did not say this. Probably because they did rent the servers, and if subpoenaed the hosting provider would produce receipts showing that. And then NSO's lawyers would get disbarred.