3 ms·
From their official blog post: > Based on my 25 years in cyber security and responding to incidents, I’ve concluded we are witnessing an attack by a nation wit
by arafsheikh 6y ago
From their official blog post:
> Based on my 25 years in cyber security and responding to incidents, I’ve concluded we are witnessing an attack by a nation with top-tier offensive capabilities.
I wonder what nations possess “top-tier offensive capabilities” today. USA, China, Russia, Israel come to mind. Who else? Is there a list or metric to measure a nation’s cyber attack capabilities?
- andrewnicolalde 6y agoProbably anyone else in the Five Eyes, especially the UK.
- mike_d 6y agoVery few companies will publicly attribute attacks to a specific government - both because it is hard and because of potential political blowback. I would confidently say that the top 50 countries by GDP have a solid offensive capability. Some, like Japan, have very specific interests that don't align with what makes the news. At some point you start getting in to the territory of Hacking Team, NSO Group, Gamma, VASTech, etc. Effectively combining the resources of many smaller governments in to a for-hire enterprise that can provide near-nation-state capabilities. Here is a list of well known attributions of groups to get you started: https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_Son4Gx0YOIzlcBWMsdvePFX68EKU/view#gid=1864660085 https://docs.google.com/spreadsheets/u/1/d/1H9_xaxQHpWaa4O_S...
- therealx 6y agoThanks. Any more info on the Japanese stuff you mention? I don't often hear about that (as you state)
- lupire 6y agoWhy would ant victim conclude anything else? You can't prove them wrong and this is what anyone trying to CYA would say.
- deleted 6y ago[deleted]
- astatine 6y agoIANASecurityExpert. Claiming that an adversary is a state actor seems as much about magnifying the threat as a genuine finding. A high school kid exploiting their weaknesses will obviously leave them red faced. Seems like an natural position to take for anyone hacked. Not saying it didn't happen, but it looks like it has become the goto defense in recent times.
- atdt 6y agoBluffing would be very risky, if turned out the attacker really was a high school kid, or the exploit was trivial. I am inclined to believe them.
- cambalache 6y agoIran is pretty good, maybe North Korea too. Countries like Netherlands, Germany, France, UK and similar must have programs in place too.
- deleted 6y ago[deleted]
- tester34 6y agoI'd say that those listed here: https://ctftime.org/ https://ctftime.org/ so usa, russia, china, poland, ukraine, japan.