Dan Goodin of Ars Technica writes about a newly-discovered hacking platform recently revealed by Kaspersky.
They are labeling the operators 'Equation Group,' and multiple zero-day exploits in the malware kit appear to be related to those which were used by Stuxnet to hack Iran's Natanz nuclear facility in 2010. It is by far the most advanced malware ever discovered, going so far as to flash malicious firmware on the hard disks of no fewer than 12 vendors. Much of the malware was distributed through usual channels such as Java vulnerabilities or ad networks, but it was even found on CDs which were mailed to attendees of a conference in Houston in 2009 which were intercepted and modified to deliver the malicious payload.
The sophistication of the operations and the malware itself leave little doubt that Equation Group is is a state-sponsored organization. The scariest part of it might be that the operation is over 14 years old and unfortunately, much of the malware is yet to be reverse-engineered. Kaspersky has been reaching out to white hats for further assistance in determining the nature and capabilities of the software.
(Score: 2) by FatPhil on Tuesday February 17 2015, @01:14PM
Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves
(Score: 0) by Anonymous Coward on Tuesday February 17 2015, @02:47PM
Dude. 77 x 26 x 128 = 250K, not 72K.
(Score: 0) by Anonymous Coward on Wednesday February 18 2015, @12:05AM
The abbreviation for 1000 (kilo) is a lowercase k.
International System of Units#Prefixes [wikipedia.org]
-- gewg_
(Score: 0) by Anonymous Coward on Wednesday February 18 2015, @11:12AM
However, 77 × 26 × 128 = 256256 = 250.25 × 1024 = 256.256 × 1000. Since rounding 250.25 gives 250, while rounding 256.256 gives 256, clearly the prefix "K" was not meant to denote 1000 but 1024. And using a lowercase k for 1024 is wrong.