blame game for cyber attacks grows murkier
Last Updated : GMT 06:49:16
Arab Today, arab today
Arab Today, arab today
Last Updated : GMT 06:49:16
Arab Today, arab today

Blame game for cyber attacks grows murkier

Arab Today, arab today

Arab Today, arab today Blame game for cyber attacks grows murkier

man types on a computer keyboard in front of the displayed cyber code in this illustration picture
Tallinn (Estonia) - Arab today

 Veteran espionage researcher Jon DiMaggio was hot on the trail three months ago of what on the face of it looked like a menacing new industrial espionage attack by Russian cyber spies.

All the hallmarks were there: targeted phishing emails common to government espionage, an advanced Trojan horse for stealing data from inside organisations, covert communication channels for grabbing documents and clues in the programming code indicating its authors were Russian speakers. 

It took weeks before the lead cyber spying investigator at Symantec, a top U.S. computer security firm, figured out instead he was tracking a lone-wolf cyber criminal.

DiMaggio won't identify the name of the culprit, whom he has nicknamed Igor, saying the case is a run-of-the-mill example of increasing difficulties in separating national spy agency activity from cyber crime

The hacker comes from Transdniestria, a disputed, Russian-speaking region of Moldova, he said.

"The malware in question, Trojan.Bachosens, was so advanced that Symantec analysts initially thought they were looking at the work of nation-state actors," DiMaggio told Reuters in a phone interview on Wednesday. "Further investigation revealed a 2017 equivalent of the hobbyist hackers of the 1990s."

Reuters could not contact the alleged hacker.

The example highlights the dangers of jumping to conclusions in the murky world of cyber attack and defence, as tools once only available to government intelligence services find their way into the computer criminal underground.

Security experts refer to this as "the attribution problem", using technical evidence to assign blame for cyber attacks in order to take appropriate legal and political responses.

These questions echo through the debate over whether Russia used cyber attacks to influence last year's U.S. presidential elections and whether Moscow may be attempting to disrupt national elections taking place in coming months across Europe.

The topic is a big talking point for military officials and private security researchers at the International Conference on Cyber Conflict in Tallin this week. It has been held each year since Estonia was swamped in 2007 by cyber attacks that took down government, financial and media websites amid a dispute with Russia. Attribution for those attacks remains disputed.

"Attribution is almost never a clean, smoking-gun," said Paul Vixie, creator of the first commercial anti-spam service, whose latest firm, Farsight Security, helps firms track down cyber attackers to identify and block them.

Raising the stakes, a mystery group calling itself ShadowBrokers has taken credit for leaking cyber-spying tools that are now being turned to criminal use, including ones used in the recent WannaCry global ransomware attack, ratcheting up cyber security threats to a whole new level.

In recent weeks, ShadowBrokers has threatened to sell more such tools, believed to have been stolen from the U.S. National Security Agency, to enable hacking into the world's most used computers, software and phones.

"The bar for what's considered advanced is lowered as time goes by," said Sean Sullivan, a security researcher with Finnish cyber firm F-Secure.

The Moldovan hacker's campaign to steal data and resell it on the web came to light only after infections popped up last year at a major airline, an online gambling firm and a Chinese automotive software maker, which are all customers of Symantec products used to secure their business networks.

Igor appears to have targeted the auto-tech company to steal its car diagnostics software, which retails for around $1,100 but Igor sold for just a few hundred dollars on underground forums and websites he had created. His aims in trying to break into the airline and gambling firm remain a mystery.

"Considering the audacity of this attack, the financial rewards for Igor are pretty low,” DiMaggio wrote in a blog post on his findings to be published on Wednesday.

As a threat, Symantec rates Trojan.Bachosens as a very low risk virus, in part because the attack singles out only a handful of specific firms rather than the wide-ranging, random attacks used by many cyber criminals to scoop up the greatest number of victims.

"I think those days are over when we can say in black and white: We know this is an espionage group," DiMaggio said.

The Symantec researcher has not reported Igor to local authorities, calculating that exposing the methods of the attack will be enough to neutralise them.

Source: Timesofoman

 

 

arabstoday
arabstoday

Name *

E-mail *

Comment Title*

Comment *

: Characters Left

Mandatory *

Terms of use

Publishing Terms: Not to offend the author, or to persons or sanctities or attacking religions or divine self. And stay away from sectarian and racial incitement and insults.

I agree with the Terms of Use

Security Code*

blame game for cyber attacks grows murkier blame game for cyber attacks grows murkier

 



Name *

E-mail *

Comment Title*

Comment *

: Characters Left

Mandatory *

Terms of use

Publishing Terms: Not to offend the author, or to persons or sanctities or attacking religions or divine self. And stay away from sectarian and racial incitement and insults.

I agree with the Terms of Use

Security Code*

blame game for cyber attacks grows murkier blame game for cyber attacks grows murkier

 



GMT 21:52 2017 Thursday ,19 October

Israeli forces arrest 7 Palestinians in West Bank

GMT 15:41 2017 Wednesday ,04 October

Putin warns against double standards in war on terror

GMT 23:42 2017 Monday ,18 September

Mattis 'shocked' by low level of US military readiness

GMT 17:36 2017 Saturday ,14 October

What's at stake for business in Iran's nuclear deal

GMT 14:14 2017 Saturday ,11 February

Ghada Adel praises participation with Adel Imam

GMT 21:00 2017 Thursday ,05 October

Scores of settlers storm into Al Aqsa

GMT 11:56 2017 Wednesday ,29 November

Iraqis throng to Picasso in Baghdad

GMT 05:43 2018 Wednesday ,12 September

"Ala" Syria determined to liberate Idleb from terrorism

GMT 19:47 2018 Thursday ,18 January

Sultan Al Qasimi launches Sharjah real estate projects

GMT 10:58 2017 Thursday ,20 April

Kabbara meets Saudi counterpart, IMO chief in Cairo

GMT 00:10 2017 Tuesday ,10 October

Turkey calls for new round of Syria talks in Geneva

GMT 00:29 2017 Tuesday ,24 October

HM King congratulates UN secretary-general

GMT 10:42 2017 Monday ,22 May

Egypt refers 48 IS suspects to military court

GMT 05:18 2017 Thursday ,12 October

Sub-Saharan Africa to grow at a slower rate this year

GMT 03:34 2017 Monday ,18 September

August24th-September23rd

GMT 23:32 2017 Thursday ,27 July

10 fishing boats to be sunk for poaching

GMT 08:09 2017 Tuesday ,25 April

Israeli enemy drone violates Lebanese skies

GMT 12:06 2017 Saturday ,21 January

Weakness in oil and gas dents GE earnings

GMT 17:20 2017 Tuesday ,01 August

Gum disease linked to higher cancer risk in women
Arab Today, arab today
 
 Arab Today Facebook,arab today facebook  Arab Today Twitter,arab today twitter Arab Today Rss,arab today rss  Arab Today Youtube,arab today youtube  Arab Today Youtube,arab today youtube

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©

Maintained and developed by Arabs Today Group SAL.
All rights reserved to Arab Today Media Group 2021 ©

arabstoday arabstoday arabstoday arabstoday
arabstoday arabstoday arabstoday
arabstoday
بناية النخيل - رأس النبع _ خلف السفارة الفرنسية _بيروت - لبنان
arabstoday, Arabstoday, Arabstoday