News for hackers. Stuff that matters.

A comment on Potent malware that hid for six years spread through routers. Parent comment

Re:Potent malware that hid for six years spread through routers by an4rchy on Monday March 12, 2018 @04:00PM (#16570994)
Not being sarcastic but sometimes it's about quality, not quantity.

Usually something this sophisticated is used to target specific individuals/organizations as they aren't generic botnet/bitcoin mining operations.

They might be after specific info and after they get it, they might even wipe their tracks as it's better to have a tool that nobody knows to look for than one that can get on as many computers as possible.

[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by petervm on Monday March 12, 2018 @04:22PM (#16571197)
Reminded me of this book I very much enjoyed about Stuxnet - "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon". Stuxnet was a targeted attack directed at Iran's nuclear program. Quality, not quantity indeed. Super interesting to learn about these things!
[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by wand3r on Monday March 12, 2018 @05:03PM (#16571607)
Stuxnet was highly targeted malware and certainly extremely sogisticated. That said, it infected probably >200,000 computer systems. To the parents point, it makes it easy to get a sample due to the volume of breaches. 100 targets with a highly covert mission objective is a different type of threat model compared to stux
[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by ghrifter on Monday March 12, 2018 @04:29PM (#16571272)
Wasnt this attack triggered by scattering payloaded USBs around the facility, and someone plugged it in? lol
[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by AnimalMuppet on Monday March 12, 2018 @04:13PM (#16571089)
Yeah, that bugs me a bit about this story. The (known) targets seem unimpressive for an attack tool this sophisticated. (Unless the targeted individuals were not just "individuals", but individuals who were prominent in certain organizations...)
[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by sbarre on Monday March 12, 2018 @04:39PM (#16571372)
> Unless the targeted individuals were not just "individuals", but individuals who were prominent in certain organizations...

I have to assume that's absolutely the case here. I didn't read this as "100 random individuals" being infected.

[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by AnimalMuppet on Monday March 12, 2018 @05:26PM (#16571812)
I didn't either. I read it as "activists", and on re-reading, I can't see where I got that. The actual targets could be a lot more important than that...
[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by sbarre on Monday March 12, 2018 @06:27PM (#16572260)
Yeah this kind of APT work seems like it would be targeted at high-value individuals, for either political or economic espionage..

So leaders of industry or government, etc..

[ Parent | on HN ]
Re:Potent malware that hid for six years spread through routers by vtange on Monday March 12, 2018 @05:02PM (#16571594)
If no known target thus far is high-profile, it could very well be that the current targets are guinea-pig-targets that test the malware for future applications.
[ Parent | on HN ]