The most significant discovery is that the attackers had selected employees at the companies with access to proprietary data, then learnt who their friends were. The hackers compromised the social network accounts of those friends, hoping to enhance the probability that their final targets would click on the links they sent.
January 30, 2010
6:47 pm
January 26, 2010
4:57 pm
January 25, 2010
Numb3rs’ description of IRC: This is EXACTLY how it is to do an Cyber Investigation. I can’t believe they got this so right. Amazing research they do for TV shows now.
6:52 pm
January 24, 2010
How many of these large security product vendors employ even one full-time person to play the role of a dedicated attacker attempting to bypass or defeat their defensive systems? Or have even hired one attack-oriented consultant on a contract for an independent assessment of the efficacy of their product or solution? Don’t let the same product vendors who failed to protect the victims of Operation Aurora turn right around and sell you those same products as a solution to “the APT threat.
10:41 pm
January 21, 2010
10:09 am
January 16, 2010
Wepawet is a service for detecting and analyzing web-based malware. It currently handles Flash, JavaScript, and PDF files.
5:09 pm
January 15, 2010
Yesterday, a copy of the unpatched Internet Explorer exploit used in the Aurora attacks was uploaded to Wepawet. Since the code is now public, we ported this to a Metasploit module in order to provide a safe way to test your workarounds and mitigation efforts.
5:13 pm
January 14, 2010
This is how Nation States Pwn
8:49 pm
It’s always struck me as faintly ludicrous anyway for a part of the industry that depends on people sitting there looking at the internet all day long to have a chance of finding something new. See that thing over there I wrote about that got a ton of press for my company? While I was finding / writing about it, your guy that *would* have found it was in his car driving to work, or walking up three sets of stairs or talking to some guy by the vending machine while waiting for free donut day.
11:08 am
January 12, 2010
Like many other well-known organizations, we face cyber attacks of varying degrees on a regular basis. In mid-December, we detected a highly sophisticated and targeted attack on our corporate infrastructure originating from China that resulted in the theft of intellectual property from Google. However, it soon became clear that what at first appeared to be solely a security incident—albeit a significant one—was something quite different.
9:33 pm
10:30 am
January 11, 2010
10:06 am
January 7, 2010
11:24 pm
January 5, 2010
10:47 am
January 2, 2010
11:54 pm
