3 ms·
I have a suspicion that a lot of these supply chain compromises are done by the security researchers at security vendors, selling software to protect the softwa
by bijowo1676 3mo ago
I have a suspicion that a lot of these supply chain compromises are done by the security researchers at security vendors, selling software to protect the software supply chain. Spreading fear to create demand for their products.
Like in the good ole days of Windows 98 and antivirus era, a lot of advanced virus techniques in the wild came from the people who used to work for AV companies
- woodruffw 3mo agoThat would be extremely surprising, given the number and severity of federal crimes involved. (I also dare say: many of these attackers demonstrate a better in-depth understanding of packaging ecosystems than supply chain security vendors do.)
- bijowo1676 3mo agothe federal crimes part is irrelevant if its below the threshold of federal authorities actually cracking down on them and figuring out entire chain. just because credit card theft and other types of scam are illegal I remember how ddos attackers created "DDOS protection" companies to protect their victims against DDOS.
- woodruffw 3mo agoI don’t think the impact of these recent malware campaigns is below the threshold for federal interest.
- Fnoord 3mo agoThat is not a suspicion, but a (baseless) theory. I mean, your proof is from Windows 98. Might as well been an outlier or urban legend, who knows. My theory is that people in countries without extradition laws to USA are going to spray the shit out of Americans. With spam, and crap like this worm, troll farms, and the like. Also baseless, but people who work at SOC can notice an increase since some changes happened in geopolitics this decade.
- cadamsdotcom 3mo agoThat's an explosive accusation and frankly quite irresponsible. Is this based on evidence, or are you just stoking anger at no one in particular?