Source Code Similarities Between NSA Malware and 'Regin' Trojan
1–10 of 200 posts
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#2There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth.
Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#3There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth. Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
I don't think it's the sport. I think it's cricket = bug = spy tool.
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#4There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth. Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
Or they had an Indian programmer in their team.
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#5There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth. Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
Or they had an Indian programmer in their team.
Or India was the first target.
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#6There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth. Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
In the PDF (who's ever shipped binary as text in a pdf btw?) [1] they argue that it might be related to Australia; who knows...
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#7If so, can the people and companies that were affected file a class action?
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#8There are also additional clues pointing to Regin being a Five Eyes tool: In the QWERTY code, there are numerous references to cricket, a sport that enjoys extreme popularity in the Commonwealth. Given the relative popularity of cricket in the US vs. the rest of the world, it's more likely that this was written outside the NSA.
I know GCHQ contractors (BAE Detica, funded as a part of the "Mastering The Internet" tender) had a hand in at least some of it; it's not unreasonable to guess it might've been that module, as that does link it? (Although of course, that's just a guess, and doesn't really tell us anything particularly new or useful.)
Not that I think nation-state malware is, you know, strictly cricket. (Quite the opposite, I've always said it was an irresponsible and reckless path, all the way back to the 1998 era.)
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#9[deleted]
Re: Source Code Similarities Between NSA Malware and 'Regin' Trojan
#10My current opinion on government hacking is, that I actually want democratic government to be the biggest meanest hackers of them all.
The alternative, unfortunately, is that either organized crime or non-democratic governments (or a combination of both) would be the biggest meanest hackers.
And hacking doesn't really scale. Mass surveillance just through attacking individuals with malware isn't possible, because of limited "talent" and a fear for exposing the tools, like just happened.
Building backdoors into systems or encryption schemes, on the other hand, isn't exactly hacking but does scale well to undiscriminate spying on millions of people.
The main issue is that intelligence and law enforcement agencies in the western world aren't bound to judicial control as tightly as they should. It also seems that a majority of voters either consent to these powers, or don't care. When politicians want to appear "acting decisively" after terrorist attacks, or foreign hacking incidents, it's not just because they like to do so. They know that, if they don't, voters will disapprove.