Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
krebsonsecurity.com
Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
1–10 of 39 posts
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#2Ah, yeah, I already wondered why these guys were suddenly back... The tell-tale sign here is admission scam emails from name-alike-domains for (mostly) Indian and (some) US colleges (with the payload being, mostly, crypto harvesters), but these are pretty noisy due to being pretty similar to earlier attempts...
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#3> Once Kaspersky discovered that the code its antivirus software detected on the NSA worker’s machine were not malicious programs but source code in development by the U.S. government for its hacking operations, CEO Eugene Kaspersky says he ordered workers to delete the code.
Krebs is ranking lower in my eyes with writing like that. First, that’s obviously malicious software. Secondly, this is muddling binaries and source code. Is the claim that Kaspersky gathered the source for malware off the machine? That’s not typical behavior. If the claim is it gathered the binary that was built, that feels like a nothing burger.
Even the response from Kaspersky makes Krebs seem alarmist for the sake of generating attention traffic rather than someone investigating if there’s anything out of the ordinary in the first place. Didn’t even give them a few days to respond before publishing the article.
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#4I am trying to temper my dislike for krebs, but it is getting difficult.
Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes.
>The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear as a technical prefix in the network of telecom providers the company works with
Censorship shouldn't happen at the AS level, anyways.
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#5Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#6> Once Kaspersky discovered that the code its antivirus software detected on the NSA worker’s machine were not malicious programs but source code in development by the U.S. government for its hacking operations, CEO Eugene Kaspersky says he ordered workers to delete the code. Krebs is ranking lower in my eyes with writing like that. First, that’s obviously malicious software. Secondly, this is muddling binaries and s…
[flagged]
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#7I am trying to temper my dislike for krebs, but it is getting difficult. Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes. > The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear…
[flagged]
Re: Notorious Malware, Spam Host "Prospero" Moves to Kaspersky Lab
#8I am trying to temper my dislike for krebs, but it is getting difficult. Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes. > The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear…
[flagged]
>you might want to check with your God Emperor on that
I'm not from the US, thanks.