Stories
Slash Boxes
Comments

SoylentNews is people

posted by LaminatorX on Tuesday February 17 2015, @11:54AM   Printer-friendly
from the nothing-to-hide dept.

Dan Goodin of Ars Technica writes about a newly-discovered hacking platform recently revealed by Kaspersky.

They are labeling the operators 'Equation Group,' and multiple zero-day exploits in the malware kit appear to be related to those which were used by Stuxnet to hack Iran's Natanz nuclear facility in 2010. It is by far the most advanced malware ever discovered, going so far as to flash malicious firmware on the hard disks of no fewer than 12 vendors. Much of the malware was distributed through usual channels such as Java vulnerabilities or ad networks, but it was even found on CDs which were mailed to attendees of a conference in Houston in 2009 which were intercepted and modified to deliver the malicious payload.

The sophistication of the operations and the malware itself leave little doubt that Equation Group is is a state-sponsored organization. The scariest part of it might be that the operation is over 14 years old and unfortunately, much of the malware is yet to be reverse-engineered. Kaspersky has been reaching out to white hats for further assistance in determining the nature and capabilities of the software.

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 1) by art guerrilla on Wednesday February 18 2015, @01:23AM

    by art guerrilla (3082) on Wednesday February 18 2015, @01:23AM (#146375)

    "1. Be aware that it is happening."

    uh oh, that has several bad, bad, bad results:
    1. so, as long as the eee-vil is distributed enough so that each participant has only a teeny, tiny piece of (ambiguous?) eee-vil to do, then everything is jake ? ? ? no, i don't think so...
    2. so, as long as the eee-vil is buried deep enough, covered up enough, or otherwise goes unnoticed, then we are cool ? ? ? no, i don't think so...

    also, i guess it is hardly unexpected, but the original poster who make the flippant and hyperbolic comment OBVIOUSLY not meant to be taken TECHNICALLY seriously, has spawned a bunch of 'but what about a file clerk sorting form 12Q-stroke-Z-dash-49's, are they eee-vil ? ? ?' well, i don't know, maybe form 12Q-stroke-Z-dash-49 is the form which gets you on the extra-judicial ASSASSINATION list, but they don't know that... are they still 'doing eee-vil' ? ? ? (see above)

    i think the larger point they were making (AND i feel is getting to the point of validity), is EVERYONE working in the gummint becomes guilty by association of furthering a vast kriminal enterprise (AKA Empire)... i mean, people who are nobodies in real organized crime/mafia scenarios are 'just as guilty' as those who do the actual hits, isn't that how the 'law'' treats them ? ? ? why shouldn't ALL gummint employees be subject to that same line of thinking: they are KNOWINGLY associating with a vast kriminal konspiracy, so it doesn't matter if they are delivering coffee and donuts for them, they are 'just as guilty', richtig ? ? ?