4 ms·

Or...falling back on less noticed contingency plans...

• Ekaros 3y ago
  My pet theory is that this was just one project they have been running for years. They are likely doing many more at same time. Slowly inserting parts in various projects and getting their contributors inside the projects.
  • 0cf8612b2e1e 3y ago
    That seems like a safe bet. If you are planning a multi year operation, it would be silly to do it all under a single account. Best to minimize the blast radius if any single exploit gets discovered.
  • guyomes 3y ago
    Some of this activity was actually documented through the alleged data breach of a hacking company [1]. [1]: https://en.wikipedia.org/wiki/Hacking_Team https://en.wikipedia.org/wiki/Hacking_Team
  • SAI_Peregrinus 3y ago
    If it's an intelligence agency exploit, this is nearly certain. Getting agents hired as employees of foreign companies to provide intelligence is an ancient practice. Getting agents to be open source maintainers is a continuation of the same thing.