Stories
Slash Boxes
Comments

SoylentNews is people

posted by LaminatorX on Wednesday October 29 2014, @06:01PM   Printer-friendly
from the draft-dodging dept.

In his career-ending extramarital affair that came to light in 2012, General David Petraeus used a stealthy technique to communicate with his lover Paula Broadwell: the pair left messages for each other in the drafts folder of a shared Gmail account. Now hackers have learned the same trick. Only instead of a mistress, they’re sharing their love letters with data-stealing malware buried deep on a victim’s computer.

Here’s how the attack worked in the case Shape observed: The hacker first set up an anonymous Gmail account, then infected a computer on the target’s network with malware. (Shape declined to name the victim of the attack.) After gaining control of the target machine, the hacker opened their anonymous Gmail account on the victim’s computer in an invisible instance of Internet Explorer—IE allows itself to be run by Windows programs so that they can seamlessly query web pages for information, so the user has no idea a web page is even open on the computer.

With the Gmail drafts folder open and hidden, the malware is programmed to use a Python script to retrieve commands and code that the hacker enters into that draft field. The malware responds with its own acknowledgments in Gmail draft form, along with the target data it’s programmed to exfiltrate from the victim’s network. All the communication is encoded to prevent it being spotted by intrusion detection or data-leak prevention. The use of a reputable web service instead of the usual IRC or HTTP protocols that hackers typically use to command their malware also helps keep the hack hidden.

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by Grishnakh on Wednesday November 05 2014, @01:15AM

    by Grishnakh (2831) on Wednesday November 05 2014, @01:15AM (#113111)

    at the same time having lots of extra-martial affairs or some extravagant sexual lifestyle then it is a problem, just as having a drinking problem, a drug problem, a gambling problem or being knee deep in debt is.

    The problem here is that one of these is not like the others. Having consensual extra-marital sexual relations (I'm talking about a situation where you have an open marriage) isn't harming anyone (as long as you don't get an STD, but you don't hear of the military disciplining enlisted single soldiers for having premarital sex and STDs/pregnancy are a risk with any sex). Drinking, drugs, and gambling addictions, and excessive debt are all actual problems which harm you.

    They are all big nono:s since they make you a security risk and open you up to easy blackmail.

    How does having extramarital affairs open you up to blackmail? Well, if you're cheating on your spouse, yes, I see how, but what if you have an open marriage? If someone told my wife I had sex with her friend (which is true BTW), she'd say "yeah, so?" (since she already knows, since I talked to her about it before and after doing it), and her big concern would be how the heck some random stranger knows this private information and is coming to her with it. Of course, with the military the potential for blackmail is there even with open relationships since, instead of going to the spouse, they could go to the CO and get the person in trouble that way, but that's a problem the military created all by itself by having a UCMJ which actually makes extramarital affairs a court-marshallable offense, no different from when you could get in trouble for being exposed as gay.

    Even if the wife knew. It doesn't matter.

    If the wife knows, then it absolutely does matter, because the only reason it's a problem at that point is because the military has rules against it. If they didn't have such rules, and the wife knows, then there would be no problem. As I said, it's a problem entirely of the military's creation by its insistence on particular moral conduct, no different at all from when homosexual activity (or just being homo) was prohibited.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2