McAfee warns of massive 5-Year hacking plot
- 04 August, 2011 02:59
- Comments
Every company in every conceivable industry is compromised by hackers - or will be shortly - according to a report from McAfee, a major maker of cybersecurity software.
"I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets has been compromised (or will be shortly), with the great majority of the victims rarely discovering the intrusion or its impact," Dmitri Alperovitch, McAfee's vice president of threat research, wrote in the report, "Revealed: Operation Shady RAT."
"In fact," he added, "I divide the entire set of Fortune Global 2000 firms into two categories: those that know they've been compromised and those that don't yet know."
In the report, McAfee revealed that more than 70 organizations around the world --including the United Nations, several national Olympic committees, 13 defense contractors and governments in the United States, South Korea, Taiwan, Vietnam and India -- had been compromised in an operation the company is calling "Shady RAT."
According to McAfee, its analysis of Shady RAT is "the most comprehensive analysis ever revealed of victim profiles from a five-year targeted operation by one specific actor."
"This is not a new attack, and the vast majority of the victims have long since remediated these specific infections (although whether most realized the seriousness of the intrusion or simply cleaned up the infected machine without further analysis into the data loss is an open question)," it added.
The Shady RAT data thefts are just a small part of a larger picture, the report noted. "What is happening to all this data ... is still largely an open question," it acknowledged.
McAfee gathered the information for its report by cracking into a command and control server used by the hackers and accessing logs on the machine that detailed the bandits' activity.
In its report, the company contended that Shady RAT had the fingerprints of a nation state on it. The "interest in the information held at the Asian and Western national Olympic Committees, as well as the International Olympic Committee (IOC) and the World Anti-Doping Agency in the lead-up and immediate follow-up to the 2008 Olympics was particularly intriguing and potentially pointed a finger at a state actor behind the intrusions, because there is likely no commercial benefit to be earned from such hacks," McAfee reported.
The report noted that the shortest time an organization was compromised was less than a month, a distinction held by nine of the targeted entities. But Alperovitch cautioned that "that this may not necessarily be an indication of the rapid reaction of information security teams in those organizations, but perhaps merely evidence that the actor was interested only in a quick smash and grab operation."
Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.
- Bookmark this page
- Share this article
- Got more on this story? Email CIO
- Follow CIO on twitter
- Closing the print security gap - The market landscape for print security
- The Top 5 Server Monitoring Battles—and How You Can Win Them
- Guidance for Calculation of Efficiency (PUE) in Data Centers
- Cost Effective Security and Compliance with Oracle Database 11g Release 2
- Why Hackers have Turned to Malicious JavaScript Attacks
-
Apple aims iPads at High Schools
-
Face Time - Interview with John Brennan and Robert DiStefano
-
Google Jumps Into Social Bookmarks Game
-
NBN build gaining momentum daily: Quigley
-
Face Time - Interview with John Brennan and Robert DiStefano
-
Seven Steps to Effective Data Governance
Creating a framework to ensure the confidentiality, quality, and integrity of data – the core meaning of data governance – is essential to meet both internal and external requirements, such as financial reporting, regulatory compliance, and privacy policies. At its best, data governance roots out risk – both business and compliance risk – by increasing oversight. This white paper provides seven steps for taking such an approach, concluding with a real world example, taking an incremental approach using a repeatable framework that is a practical, proven strategy that any size organization can implement to suit their immediate and long-term needs and budget. -
Printer Usage and Cost Management Strategies for the Australian Mid-market, an Unrealised Opportunity
This whitepaper was commissioned to aid senior business and ICT decision makers of medium-sized government and corporate organisations, including marketing, finance, and technology executives to better understand the current use of print devices including copiers, printers and multi-function Page 19 Reproductions in whole or in part are prohibited. This whitepaper also provides insights into how current management practices can be improved to optimise investments and improve sustainability. Read on. -
Oracle Exadata - Extreme performance, lowest cost.
As organizations contend with escalating demands for greater quantities of information, more sophisticated data analysis, and a burgeoning user population, Oracle Exadata makes database workloads faster, easier to manage, and less expensive. Oracle Exadata is the world’s first database machine to provide extreme performance for both data warehousing and online transaction processing (OLTP) applications. Read this whitepaper.
-
Refactoring in Large Software Projects - Performing Complex Restructurings Successfully
-
Algorithms for Image Processing and Computer Vision
-
PC Disaster & Recovery
-
Professional Dotnetnuke ASP.NET Portals
-
Blender for Dummies®
-
Always Be Testing
-
Managing and Leading Software Projects
-
Microsoft Rising ...and Other Tales of Silicon Valley
-
Operating Systems Concepts with Java 6E eGrade Plus Standalone Access








Comments
Post new comment