Operation Triangulation What You Get When Attack iPhones of Researchers [video]
1–10 of 28 posts
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#2[deleted]
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#3The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking for other victims of this attack using the IOCs discovered at Kaspersky. If we find other instances of this attack on Taiwanese government officials or members of the Uighur population, for instance, that would be a smoking gun for attributing it to one particular nation. Finding traces of this attack on the devices of Ukrainian government officials would point in a different direction. Either way, we need to be able to attribute this attack, and the other victims of this APT might not know to check themselves for indicators. Does anyone here know if there are efforts by cybersecurity researchers to uncover other victims of this attack in vulnerable or potentially targeted communities?
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#4The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
There are generally 4 major cyber powers that I consider when hearing about new advanced techniques / applications / threats: USA, Russia, Israel, China (in roughly that order). Israel is obviously complicated because historically a lot of their work has been in partnership with the USA, but that seems to be mildly less the case these days.
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#5The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
Is there an "everyone knows but nobody says" dynamic here, like if the tea comes from Mandiant/CrowdStrike it's about Russia, if it comes from Kaspersky it's about NSA, etc?
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#6The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
There are generally 4 major cyber powers that I consider when hearing about new advanced techniques / applications / threats: USA, Russia, Israel, China (in roughly that order). Israel is obviously complicated because historically a lot of their work has been in partnership with the USA, but that seems to be mildly less the case these days.
> Israel is obviously complicated
They also have a large and profitable industry selling state of the art tools to authoritarian regimes/dictators to target democracy activists and journalists.
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#7The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
There are generally 4 major cyber powers that I consider when hearing about new advanced techniques / applications / threats: USA, Russia, Israel, China (in roughly that order). Israel is obviously complicated because historically a lot of their work has been in partnership with the USA, but that seems to be mildly less the case these days.
I could be very wrong, but I feel Israel’s cybersecurity tech is more advanced than Russia (could be my western programming lol)
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#8Earlier quoted context omitted.
There are generally 4 major cyber powers that I consider when hearing about new advanced techniques / applications / threats: USA, Russia, Israel, China (in roughly that order). Israel is obviously complicated because historically a lot of their work has been in partnership with the USA, but that seems to be mildly less the case these days.
> Israel is obviously complicated They also have a large and profitable industry selling state of the art tools to authoritarian regimes/dictators to target democracy activists and journalists.
But would they sell to Russia/China which is in opposition to their biggest sponsor - the USA? The answer is obviously: if they can get away with it. Personally it seems more likely to be US but that's just a gut feeling.
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#9The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
You can bet that if Kaspersky dares to uncover this in that much detail and with so much publicity, then revealing those details doesn’t go against the interests of the Russian state. (Which, to be very clear, is not the same thing as suggesting Kaspersky is an actor of the state. Just that they would wisely think twice about revealing attacks from a certain direction.)
Re: Operation Triangulation What You Get When Attack iPhones of Researchers [video]
#10The lack of attribution on this organized and well-financed operation is the most concerning part of this attack, in my opinion. It seems unlikely that any APT would burn ALL of its 0-days for the iOS platform in one campaign, so they likely have more which they can pivot to. Of course there are 3 nation-states who are most likely to be behind this operation, but which one was it? If possible, we should be looking fo…
[deleted]