4 ms·
Finfisher, a stealthy collection of spying tools sold by the British firm Gamma Group that they eventually tracked to command-and-control servers in 25 countrie
by higherpurpose 12y ago
Finfisher, a stealthy collection of spying tools sold by the British firm Gamma Group that they eventually tracked to command-and-control servers in 25 countries.
This is why I always take stories about "attack coming from China" with a huge grain of salt. It should be trivial to make an attack look like it came from a certain country, especially for an agency like NSA that has direct access to millions of computers in China.
- mox1 12y agoWould you run a SAAS service, website , etc. from mainland China, even if the hosting was free? Probably not. Between the great firewall of China shutting you down for "maintenance", Carrier Grade NAT blocking your server, etc. etc. it makes no sense. Personally, I would choose a former USSR country, one with reliable internet access (blame it on the Russians) or Canada, Germany, etc. Think big picture, your Malware C&C has to have good uptime :), the terrorists don't sleep!
- hyperpape 12y agoI didn't read that the same way as you, though it's hard to tell what they're saying. My first thought was that means they traced Finfisher installations to 25 countries. Those might be command and control centers for 25 distinct countries, or one. And they might or might not be the countries where the server's were located.
- industriousthou 12y agoI kinda figured they used a variety of forensic data to identify where an attack originated, not just the IP address. Or am I misreading your comment?