3 ms·
Do I understand correctly, that the hackers improved the dll's code deliberately, so that Orion wouldn't manifest bugs which might invite debugging scrutiny tha
by NoMoreNicksLeft 4y ago
Do I understand correctly, that the hackers improved the dll's code deliberately, so that Orion wouldn't manifest bugs which might invite debugging scrutiny that also revealed the backdoor?
- stevenwoo 4y agoThe way I read it, they left the other functionality unchanged and injected their source code change into the .dll source, made the build process build both the hacked version and the unhacked version (for later) and put the hacked version into the installation package and deleted evidence of the hacked dll in the build and restored the unhacked dll to it's place so no one could tell what happened just by looking at the end results and doing a dump or binary diff on just that dll. Similar to but not the same as the pirated xcode malware injection.
- GTP 4y agoProbably, this sounds like a plausible explanation.
- nibbleshifter 4y agoIt used to be fairly common practice for skilled hackers to patch the way they got in, to avoid their borrowed systems from being invaded by skids.
- ComputerGuru 4y agoThis is different, more like putting a trap door in the ceiling and then patching all the leaks in the roof so that the homeowner won’t need to climb up on to the roof to fix those themselves and in doing so stumble on your trap door.