4 ms·
Can you cite specific examples of national security officials misattributing a script kiddie as nation-state level sophistication? This is a common take which I
by Godel_unicode 6y ago
Can you cite specific examples of national security officials misattributing a script kiddie as nation-state level sophistication? This is a common take which I've never seen substantiated anywhere. In comparison with hidden cobra, olympic destroyer, or the canonical stuxnet which were all clearly not script kiddies.
- ianhawes 6y agoI don't have a more recent example, but this article[0] identifies a component of the RSA SecurID attack which utilized Poison Ivy. In my own experience experimenting with PI as an underaged teen in high school, it was a very popular and very lethal trojan and by most definitions, users were "script kiddies". The old school concept of a script kiddie was someone who had a limited skill set that consisted of downloading exploits and trying everything to see what worked. Traditionally, a script kiddie didn't develop any of their own exploits. Nowadays these people are known as Network Security Consultants and they are paid very well. [0] https://www.computerworld.com/article/2483923/poison-ivy--used-in-rsa-securid-attack--still-popular.html https://www.computerworld.com/article/2483923/poison-ivy--us...