News for hackers. Stuff that matters.

A comment on The FBI investigating hacking of Covid research by “PRC-affiliated cyber actors”. Parent comment

Re:The FBI investigating hacking of Covid research by “PRC-a... by orbifold on Tuesday May 26, 2020 @03:36PM (#23315513)
Facts:

1 - one of the two incidences reported (#EGI2020512) targeted academic data centers "for unknown purposes" (https://csirt.egi.eu/academic-data-centers-abused-for-crypto...) and not necessarily crypto currency mining.

2 - IP addresses associated with that second attack were all assigned to a Chinese University (Shanghai Jiaotong University), CSTNET and one Polish host known to be compromised by someone from China.

[ Parent | on HN ]
Re:The FBI investigating hacking of Covid research by “PRC-a... by TeMPOraL on Tuesday May 26, 2020 @06:28PM (#23317187)
Re 2., since when IP is address tracking a reliable method of attack attribution?

It's like trying to assign blame for a terrorist attack based on where the jacket dropped by a terrorist was made. Maybe it was made in their home country. Maybe it was imported. Or maybe they purposefully wore a jacket made in a different country and dropped it on the scene to confuse you.

[ Parent | on HN ]