Operation Shady Rat Is The Largest Cyber Attack Ever Uncovered • Hacker News Board

Post by est » Thu, Aug 04, 2011, 1:11 PM UTC

sp_ wrote: post #13

est wrote: post #4

> As spring gave way to summer, bloggers and computer-security experts found evidence that the attack on RSA had come from China They never say what evidence, which is the most interesting part of the article. Does anyone have a more detailed description of how they identified it was China?

I worked on the technical side of the RSA attack analysis and not the attribution/political side but some guy on Twitter ( https://twitter.com/yuange1975 ) who pretends to be Chinese has claimed responsibility for the RSA 0-day and some other high profile 0-day exploits on his Twitter feed in a way that makes him the credible original source of those exploits. I am sure the people on the attribution side dug deeper t…

That's cool. Much better than the blah acticle. 袁哥 is actually a very skilled hacker and reputable in China. IIRC He works for NSFocus, NSFocus used to be the de facto operator of China's G.F.W., it was replace by another firm after a Taiwan spy issue.

edit: http://jeffreycarr.blogspot.com/2011/06/18-days-from-0day-to...