Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
washingtonpost.com
Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
1–10 of 298 posts
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#2So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it?
And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"?
This seems like a very different story from any of the Kaspersky stuff I've been hearing. I'm sort of surprised Kaspersky had servers vulnerable to Israel, but I'm really surprised it was acceptable for NSA TAO employees to do work on their personal machines. I merely work in algorithmic trading, and everyone in the industry is paranoid about code leaving the building (at least one employer I know of straight-up doesn't have a VPN at all, from what I've heard). How is the NSA not as paranoid here?
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#3So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
They probably didn't hack anything, they just have people who receive these AV samples as malware researchers. Any intelligence agency worth their money should.
And yes, this is the gist of what's behind all the Kaspersky hysteria. The NSA trying to obscure another extremely embarrassing leak.
Every AV software uploads new detections for analysis. It just so happened that this fool used Kaspersky. It's abundantly clear that behind all the make believe is a mostly incompetent agency that can't keep it's secrets any better than Equifax.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#4So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
Perhaps he was doing the bidding of his employers in order to test a theory that Kaspersky was an attack vector?
I mean, this is exactly how you tell if your data has been breached or your source code leaked -- you put fake but unique records in your database then watch the dark webs for folks selling dumps containing those values; and plausible but bogus code containing unique constants then check competitors' binaries against those values.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#5Perhaps he/she had the data on a SAN while performing development from a more “secure” computer and one of his personal computers with AV installed was connected to the same SAN. A likely scenario as far as scenarios go.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#6So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
Acceptable, no. People not following rules, it happens.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#7So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
They probably didn't hack anything, they just have people who receive these AV samples as malware researchers. Any intelligence agency worth their money should. And yes, this is the gist of what's behind all the Kaspersky hysteria. The NSA trying to obscure another extremely embarrassing leak. Every AV software uploads new detections for analysis. It just so happened that this fool used Kaspersky. It's abundantly cle…
Basically.
I've seen what now looks like state sponsored bullshit blogs posing as tin foil hatters being posted to HN saying Kaspersky is part of the Russian intelligence apparatus, and that's why the US government pressured stores to remove Kaspersky AV from store shelves, etc etc etc.
Most likely, they did their job, and they did it correctly. The NSA can't really defeat competent AV researchers who aren't even looking at the NSA in the first place.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#8So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
>Kaspersky promptly identified the malware they were working on as malware and uploaded it?
If the news story is to be believed, Kaspersky was scanning for classified data using US intelligence codewords as a selector.
>I'm sort of surprised Kaspersky had servers vulnerable to Israel
I'm not, everyone's servers are vulnerable. Intelligence agencies can buy exploits. If they want in, they get in.
>but I'm really surprised it was acceptable for NSA TAO employees to do work on their personal machines.
I don't believe it is allowed. That said controlling access to data is hard, lots of people probably do work at home with classified stuff when they are told they shouldn't.
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#9So, if I understand this right... some NSA TAO employee was doing work on their home computer (???), where they installed Kaspersky AV (reasonable), and Kaspersky promptly identified the malware they were working on as malware and uploaded it? And then Israel hacked Kaspersky 'cause that's what they do or something, found the NSA development malware, and was like "Hey NSA, you should figure out how this got here"? Th…
I can think of at least 1 reason why Israel would hack Kaspersky...https://en.wikipedia.org/wiki/Stuxnet#Discovery
Re: Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached
#10Kaspersky should spin this into an ad campaign on how their machine learning malware A.I uncovered secret NSA malware and uploaded the files for analysis, thus, preventing another Stuxnet/Olympic Games outbreak.