2 ms·
Weird that you're on this thread saying it's not the SVR, and you're on the vaccine thread saying that's a bunch of nonsense. I'm sure that's just random though
by strictnein 6y ago
Weird that you're on this thread saying it's not the SVR, and you're on the vaccine thread saying that's a bunch of nonsense. I'm sure that's just random though.
SANS isn't some secret government group - I have a colleague who is an instructor there. Those recordings aren't some top secret briefings. I and a lot of other industry professionals attended them
> " It's FireEye spewing out stuff as "facts" with very little evidence."
An APT has certain TTPs that allow you to start to figure out who is behind attacks. FireEye has tracked the attacker as UNC2452, which means it is "uncategorized" in their view. Others have come forward pointing fingers at the SVR.
Finally, just a tip: if you want to sound like you know what you're talking about, it's not a "CNC" it's a "C2".
- djsumdog 6y agoI'd appreciate it if you kept arguments to the topic on this thread. Looking up other topics and condemning people for their opinions is not cool. It's becoming a large problem in a lot of online forums. All of us have a lot of different opinions and they vary. This isn't Reddit. > SANS isn't some secret government group I understand that, but the video/livestream they released at the time was Unlisted on YouTube and had a watermark saying it wasn't for general release. I realize they didn't intend to have it up permanently and am familiar with the roles SANS has in the security industry. I was just commenting on the video and things I think they got wrong. > Finally, just a tip: if you want to sound like you know what you're talking about No need to be insulting. I've heard them called Command and Control servers before. I don't currently work in security; haven't in years. I'm just speaking as as developer/sysadmin.
- deleted 6y ago[deleted]