Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
1–10 of 31 posts
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#2Thanks for posting this - perfect read for right before bed!
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#3Fascinating reading - my take-home is that US corporates are going to have to have disclosure rules whether they want to or not. The question is whether this will come from Congress or the regulators.
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#4> As spring gave way to summer, bloggers and computer-security experts found evidence that the attack on RSA had come from China
They never say what evidence, which is the most interesting part of the article. Does anyone have a more detailed description of how they identified it was China?
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#5While I support the opinions with regard to security and disclosure as presented, the rest of the article is regrettably lacking in detail, specifics, evidence, or attributable quotes on what has actually occurred. It's hard to say if this is just the typical style of a piece for general audiences on this topic, or the tail wagging the dog on attributing these things to china in the public eye.
Frankly, what's more alarming; the dedicated resources of a single state actor, or a complex, emergent network of self-interested individuals and groups persuing their own aims?
I find the Chinese explanation a little too convenient and a little too amenable to typical national defense thinking. What this article really says to me is that if you want to hack an American company, own a Chinese box first. Nobody will look any further.
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#6A better account of the story at the McAfee Blog: http://blogs.mcafee.com/mcafee-labs/revealed-operation-shady...
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#7While I support the opinions with regard to security and disclosure as presented, the rest of the article is regrettably lacking in detail, specifics, evidence, or attributable quotes on what has actually occurred. It's hard to say if this is just the typical style of a piece for general audiences on this topic, or the tail wagging the dog on attributing these things to china in the public eye. Frankly, what's more a…
What this article really says to me is that if you want to hack an American company, own a Chinese box first. Nobody will look any further.
Exactly -- it's pretty easy to rent a chinese box from one of the many botnets out there, and I guess that would be the first choice of an intruder to hide his trails.
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#8The most shocking revelation IMO is that "less than 10 percent of [RSA's] customers have requested replacement tokens". IOW, everybody knows the entire SecurID system was compromised, yet 90% of its users decided to do nothing about it!
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#9The sidebar can be slightly NSFW. Here is a version of the same article without the distractions: http://www.vanityfair.com/culture/features/2011/09/chinese-h...
Re: Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered
#10The most shocking revelation IMO is that "less than 10 percent of [RSA's] customers have requested replacement tokens". IOW, everybody knows the entire SecurID system was compromised, yet 90% of its users decided to do nothing about it !
Perhaps some of them got replacements from RSAs competitors? (I'm not an expert in this area, that was my take on it.)