Critical.
Authoritative.
Strategic.
Subscribe to CIO Magazine »

McAfee warns of massive 5-Year hacking plot

The cybersecurity firm says targets of the five-year operation included the United Nations and national governments

Every company in every conceivable industry is compromised by hackers - or will be­ shortly - according to a report from McAfee, a major maker of cybersecurity software.

"I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets has been compromised (or will be shortly), with the great majority of the victims rarely discovering the intrusion or its impact," Dmitri Alperovitch, McAfee's vice president of threat research, wrote in the report, "Revealed: Operation Shady RAT."

"In fact," he added, "I divide the entire set of Fortune Global 2000 firms into two categories: those that know they've been compromised and those that don't yet know."

In the report, McAfee revealed that more than 70 organizations around the world --including the United Nations, several national Olympic committees, 13 defense contractors and governments in the United States, South Korea, Taiwan, Vietnam and India -- had been compromised in an operation the company is calling "Shady RAT."

According to McAfee, its analysis of Shady RAT is "the most comprehensive analysis ever revealed of victim profiles from a five-year targeted operation by one specific actor."

"This is not a new attack, and the vast majority of the victims have long since remediated these specific infections (although whether most realized the seriousness of the intrusion or simply cleaned up the infected machine without further analysis into the data loss is an open question)," it added.

The Shady RAT data thefts are just a small part of a larger picture, the report noted. "What is happening to all this data ... is still largely an open question," it acknowledged.

McAfee gathered the information for its report by cracking into a command and control server used by the hackers and accessing logs on the machine that detailed the bandits' activity.

In its report, the company contended that Shady RAT had the fingerprints of a nation state on it. The "interest in the information held at the Asian and Western national Olympic Committees, as well as the International Olympic Committee (IOC) and the World Anti-Doping Agency in the lead-up and immediate follow-up to the 2008 Olympics was particularly intriguing and potentially pointed a finger at a state actor behind the intrusions, because there is likely no commercial benefit to be earned from such hacks," McAfee reported.

The report noted that the shortest time an organization was compromised was less than a month, a distinction held by nine of the targeted entities. But Alperovitch cautioned that "that this may not necessarily be an indication of the rapid reaction of information security teams in those organizations, but perhaps merely evidence that the actor was interested only in a quick smash and grab operation."

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

More about: International Olympic Committee, IOC, McAfee, United Nations
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the CIO comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: firewalls, hackers, mcafee, network security, online security, security
Latest Blog Posts
Whitepapers
  • Seven Steps to Effective Data Governance
    Creating a framework to ensure the confidentiality, quality, and integrity of data – the core meaning of data governance – is essential to meet both internal and external requirements, such as financial reporting, regulatory compliance, and privacy policies. At its best, data governance roots out risk – both business and compliance risk – by increasing oversight. This white paper provides seven steps for taking such an approach, concluding with a real world example, taking an incremental approach using a repeatable framework that is a practical, proven strategy that any size organization can implement to suit their immediate and long-term needs and budget.
    Learn more »
  • Printer Usage and Cost Management Strategies for the Australian Mid-market, an Unrealised Opportunity
    This whitepaper was commissioned to aid senior business and ICT decision makers of medium-sized government and corporate organisations, including marketing, finance, and technology executives to better understand the current use of print devices including copiers, printers and multi-function Page 19 Reproductions in whole or in part are prohibited. This whitepaper also provides insights into how current management practices can be improved to optimise investments and improve sustainability. Read on.
    Learn more »
  • Oracle Exadata - Extreme performance, lowest cost.
    As organizations contend with escalating demands for greater quantities of information, more sophisticated data analysis, and a burgeoning user population, Oracle Exadata makes database workloads faster, easier to manage, and less expensive. Oracle Exadata is the world’s first database machine to provide extreme performance for both data warehousing and online transaction processing (OLTP) applications. Read this whitepaper.
    Learn more »
All whitepapers
rhs_login_lockGet exclusive access to Invitation only events CIO, reports & analysis.
Recent comments