Re:Mysterious safety-tampering malware infects a second site
by varjag on Sunday April 21, 2019 @02:30AM
(#19710819)
> With enough resources you can break anything.
Very few adversaries have enough resources to break anything. The threshold for roughing up a Windows setup is the lowest in the industry.
Check out the DEFCON 2018 talk "Through the Eyes of the Attacker" to see to what lengths the TRITON attackers went. These guys were dumping eeproms from boards running obscure MIPS processors and were looking at raw ethernet packets in Wireshark and flipping bits in the packets to see what would happen. That their command&control was running on Windows was just coincidence.