My thought while reading this: "There's someone at Google running IE?"
I imagine most of the staff. Google makes sure all of their software works in most of the popular browsers.
[deleted]
Google Hack Attack Was Ultra Sophisticated, New Details Show
31–40 of 116 posts
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#32I find the fact that the targets were source code repos very interesting. If you are a super-smart black-hat villain who wants to plan a mass global attack, what better place to start than with Google and Adobe's source code?
It'll make the next attack much easier -- they'll have a better idea of the flaws available, and more ability to find unpatched, non-public bugs.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#33Update from a Chinese anonymous source, credibility unknown http://www.brookswelding.com/ Undercover agents were sent to Google Shanghai Office, cracked Gmail source code and get away with a 1 million RMB reward
link to Google Translate'd in English:
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#34Their effort to obfuscate their tracks does sound pretty nifty, but part of me is disappointed that it all depended on the target clicking on something they shouldn't have. Glorified phishing schemes just don't have the pizazz of a remote buffer overflow exploit, for example.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#35Another aspect perhaps most of people ignored is:
Chinese government has all the source code of Windows systems:
http://news.cnet.com/2100-1016_3-5083458.html
Including:
Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems
It's reviewed by top three Chinese universities and other three government agencies.
The Party is the new overload of 0day farmer.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#36Another aspect perhaps most of people ignored is: Chinese government has all the source code of Windows systems: http://news.cnet.com/2100-1016_3-5083458.html Including: Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems It's reviewed by top three Chinese universities and other three government agencies. The Party is the new o…
Yeah, North Korea, Iran, and Afghanistan also have all of the source code of Linux. What is your point?
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#37Sorry, this article lacks real detail. Sounds like standard fare -- an IE vulnerability, malicious emails, "several layers of encryption?" Sorry...not impressed.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#38Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#39Their effort to obfuscate their tracks does sound pretty nifty, but part of me is disappointed that it all depended on the target clicking on something they shouldn't have. Glorified phishing schemes just don't have the pizazz of a remote buffer overflow exploit, for example.
This kind of attitude has to stop. "Glorified phishing" might not have pizazz, but it was DAMN effective in this case. Why go to the trouble of finding, coding, exploiting an increasingly difficult target when end users will do all the work for you?
This is the kind of scenario that gives security people nightmares. It takes VERY sophisticated processes and technology to find covert backdoors on your network, and very few places devote the manpower or $$$ to the effort.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#40Does anyone have a full list of the 34 companies?
Not yet, but you can probably make some educated guesses. What US companies have technologies that China might be interested in?
-Google -Microsoft -Boeing -Intel -Cisco (imagine the value of their source code) -Apple -Any of the defense contractors etc.