Live data from Hacker News

Botnet that hid for 18 months

arstechnica.com

21–25 of 25 posts

Re: Botnet that hid for 18 months

#22

Did anyone ever decrypt that portion of Gauss, circa 2012? That's the most effectively hidden malware code I know of. https://arstechnica.com/information-technology/2013/03/the-w...

No. I know a few antivirus companies and security searchers continue to run brute force cracks against it going on 10 years now.

Other modules in Gauss monitored transactions with Lebanese banks, so a logical assumption is it was deployed as part of a terror financing investigation against a very specific set of computers.

Re: Botnet that hid for 18 months

#23

Earlier quoted context omitted.

insider trading without insider trading - the netflix engineers who got busted by the DoJ last year did well over 3 million USD on just subscriber data - imagine what access to exec inbox would look like -

but wouldn't it be easy to catch people with lot of near expiry far OTM put options for instance? Or are these people going on r/wallstreetbets to write long DD upvoted by bots, purchased accounts, awards, under VPN to make their purchases seem organic? Still wouldn't it be obvious somebody doing that routinely and establishing a pattern of unusually high win rates before earnings? Sort of like how poker companies ca…

Buying near expiry OTM options is kind of the gold standard on r/wallstreetbets anyway. But I think giving away insider DDs there would cannibalize the winning chance and could in theory even turn a projected win into a loss which is why ultimately this information isn't thrown around easily. That said, a winning streak by someone can really just be pure luck and most DDs are based on incomplete/speculative information. Also that's really the point of wsb to place actual bets (safe plays are on r/investing...)

Re: Botnet that hid for 18 months

#24

Interesting -- not targeting defense contractors or governments.. > In this blog post, we introduce UNC3524, a newly discovered suspected espionage threat actor that, to date, heavily targets the emails of employees that focus on corporate development, mergers and acquisitions, and large corporate transactions. On the surface, their targeting of individuals involved in corporate transactions suggests a financial moti…

insider trading without insider trading - the netflix engineers who got busted by the DoJ last year did well over 3 million USD on just subscriber data - imagine what access to exec inbox would look like -

If you want to do insider trading without penalties get elected to Congress.

"59 members of Congress have violated a law designed to stop insider trading and prevent conflicts-of-interest"

https://www.businessinsider.com/congress-stock-act-violation...

Re: Botnet that hid for 18 months

#25
post #12

Is this what it takes for IoT devices to finally get DMZ'd away from main networks at enterprises?

Do other companies seriously not do this? I would think that is a basic security concept at this point. Then again, I've seen worse security practices at companies.
Post reply on HN