4 ms·
How do they know they’re Chinese? If they’re doing something as dumb as using a Chinese IP or entering Chinese text, why not just ban China/Chinese characters
by _lvbh 3y ago
How do they know they’re Chinese? If they’re doing something as dumb as using a Chinese IP or entering Chinese text, why not just ban China/Chinese characters
- darkclouds 3y ago[dead]
- rightbyte 3y agoThey don't know. Its war monger karma farming. These guys are quacks.
- w0z_ 3y agoYou tend to comment "it's war mongering" and how nobody actually knows who the attackers are, but you seem to say this out of alliance with no technical background in how these connections are made.
- rightbyte 3y agoYes I do. I am having a slow motion break down so I am sorry if it gets annoying. The naming of ethnicity/nationality in articles like these seems governed by "geopolitical" tides. There is no way there is some forensic way to figure out where somewhat competent hackers are from.
- frozenport 3y agoDude, did you even read the article? Last time they identified the hackers, those guys changed their "signatures" AKA the things they did to give themselves away. Even the best hackers etc slip up. The exact method to identify them is irresponsible to reveal because the malicious party will use it their advantage.
- NoZebra120vClip 3y agoCybersecurity firm Mandiant has identified this threat actor as "UNC3886". https://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypass https://www.mandiant.com/resources/blog/vmware-esxi-zero-day... The heuristics used by security researchers are not really based in externals as you suggest. There is significant energy devoted to classifying and categorizing threat actors, and the main takeaways here are (1) nation-state-level power/funding and (2) not on our side.
- deleted 3y ago[deleted]
- relativ575 3y agoCybersecurity is a cat and mouse game, nobody made their methods public, on any side. How do we know that you aren't from Chinese intelligence who is trying to figure out why they could trace back to the Chinese hackers in this case? If Mandiant said they caught a Chinese hacker red handed by tracing the connection to his house in Beijing, and they were able to record his keystrokes, would you believe them? When Kapersky said they discovered zero days by US intelligence, they gave no evidence either: [FSB] goes on to claim without evidence that the attacks amount to a plot between Apple and the NSA to build a powerful surveillance infrastructure to snoop on those with ties to Russia. https://www.darkreading.com/endpoint-security/apple-zero-days-imessage-4-year-spying-ios https://www.darkreading.com/endpoint-security/apple-zero-day...
- _lvbh 3y ago> If Mandiant said they caught a Chinese hacker red handed by tracing the connection to his house in Beijing, and they were able to record his keystrokes, would you believe them? Probably > When Kapersky said they discovered zero days by US intelligence, they gave no evidence either I listened to the Kapersky talk. They didn’t attribute it to anyone. The FSB is not Kapersky. No, I don’t believe the FSB precisely because they have no evidence.