News for hackers. Stuff that matters.

A comment on Hackers used SolarWinds' dominance against it in sprawling spy campaign. Parent comment

Re:Hackers used SolarWinds' dominance against it in sprawlin... by naikrovek on Wednesday December 16, 2020 @12:20AM (#25439360)
Maybe because it is believed (or known, or anywhere in between) that they are presently actively doing things of this nature...

Attackers also leave breadcrumbs behind; fingerprints, in a way. Sometimes the actions taken are the fingerprint, sometimes the effort to cover up those actions is the fingerprint.

If I am an investigator and I see trademark actions or cleanup that I've seen before in a russia-sponsored attack, it is not a huge leap to strongly suspect I am investigating a russia-sponsored attack.

[ Parent | on HN ]
Re:Hackers used SolarWinds' dominance against it in sprawlin... by kjaftaedi on Wednesday December 16, 2020 @01:08AM (#25439609)
And if you're a skilled attacker, wouldn't you leave breadcrumbs leading to someone else's door?

Like how North Korea is largely seen as responsible for hacking Sony. If you paint a big enough arrow, people will follow it.

[ Parent | on HN ]