4 ms·
Of course, China. How is it they are incompetent to protect the data, yet competent enough to know immediately who did it.
by dpweb 11y ago
Of course, China. How is it they are incompetent to protect the data, yet competent enough to know immediately who did it.
- themeek 11y agoStopping Computer Network Exploitation is very, very difficult (the attacks happen at close to the speed of light). However with appropriate signals intelligence, sources of attacks can be determined. We don't know that China was really behind these attacks, but the US has a pretty good track record at attestation so far.
- jessaustin 11y agoHow would we know? The most notable attestation I can think of was NK-Sony, and that is dubious at best. I'll stipulate that China is behind lots of hacks, but that means attributing any particular one to them could be just a good guess.
- themeek 11y agoThe NK-SONY episode was undoubtedly NK or NK-sympathizers. The malware analysis from Fireeye is a good start for this (it was a variant of malware used by NK to target SK media outlets that run negative press against the regime, was compiled with Korean character sets, and much more), but it's also true that the motive of the hack, written by the Guardians of Peace themselves, was to punish the US for the State Department and CIA's involvement in the creation of The Interview and the plans to get the movie into NK. Curiously linguistic analysis of the Guardian of Peace messages suggest that the author was possibly Russian and variants of the malware package had also been used in an Iranian attack on US oil companies in the Middle East. (These nations are known to collaborate in malware development and tactics, tools and proceedures.)