Advanced Persistent Threat Compromise of Government Agencies

Re:Advanced Persistent Threat Compromise of Government Agencies by kerng on Thursday December 17, 2020 @05:28PM (#25461347)

Interesting that this post does not attempt to attribute the attack to a specific ATP. Wonder why that is? Most other platforms were fast with attribution.

Also, worrisome that they already say there were other attack angles besides what is public at this point.

[ Parent | on HN ]

Re:Advanced Persistent Threat Compromise of Government Agencies by rl3 on Thursday December 17, 2020 @06:10PM (#25461741)

Attribution involves sources and methods, some of which are classified.

If an APT is competent, definite attribution of their activities becomes almost impossible.

Perhaps we now live in a weird world now where—with few exceptions—APTs can only be identified by other APTs.

[ Parent | on HN ]

Re:Advanced Persistent Threat Compromise of Government Agencies by tmaly on Thursday December 17, 2020 @05:53PM (#25461600)

they mention in the report "discussion of findings and mitigations should be considered very sensitive"

Maybe they do not have clue who is doing it?

[ Parent | on HN ]