"the malware is written in the Visual Basic Scripting language." is where I stopped đš lol at least we know the Russians are suffering.
Are they? Because if the worm is successfully spreading... đ¤ˇ
It's funny, though..
They're Russians. There's no situation where they aren't suffering.
Theyâve been exporting their suffering to Ukraine the last few years as well.
As a non programmer, isn't visual basic for Excell scripts?
No you can run any .vbs script standalone
Iâm not following. VBScript seems like the right tool. Why would they use something else? Theyâre generally light years beyond US defense capabilities so thereâs a real dearth of suffering on their side.
Now if the joke is that theyâre suffering because they have to use VBScript, I can get behind that
WScript.Echo "Just saying if I was invited onto a team intent on wreaking havoc upon our enemies, I would probably quit after 100 lines of calling windows apis in VBScript" & vbNewLine
tbh I think VBScript is more pleasant to write than C in many cases
Nothing wrong with that! VB isn't fundamentally bad, I'm just accustomed to C family langs
Meanwhile if you load Baofeng software from a few years ago antivirus software today will ping out. It never used to ping out, such is the nature of zero days.
Meanwhile Israel has been selling weapons grade hacking technology for decades, they've been directly linked to the assassination of Jamal Khashoggi as well as the Mexican cartels.
Meanwhile Argentina happens to be the hub for zero day exploits, with a bunch of hackers inventing their own shit and selling directly to state actors or whoever will pay.
The only way you can remain secure is to regularly install a fresh OS. Change my mind.
The only way to be truly secure is to throw your computer into the sea and return, naked and fearless, into the forest from whence we came.
But what about the bears?!?
What part of 'fearless' dont you understand?
I've got naked down pat.
I got that nickname because I used to wear No Fear shirts in High School.
They can come too.
Are they moon bears or saturn bears?
This is just return to monke but more poetic...
... I'm here for it.
... Except for the bugs.
I'd rather deal with software bugs than jungle bugs...
Change my mind.
Sure. Even regularly installing a new OS doesn't necessarily keep you secure if someone wanted to discreetly install malware on your device. In addition to firmware-level rootkits that re-install themselves on fresh OSs (even platform-agnostic ones), it's possible that someone might interdict whatever hardware is bought and implant it with additional small hardware that compromises it in some way.
They don't even need to work that hard, just compromise the ME/PSP and do whatever.
Change my mind.
In the end, if you are not of interest to a nation state hacker (or a member of a drug cartel) you have nothing to fear from the things you listed.
But that won;t change your mind.
Your incorrect assumption is that only cartels and nation states are using said software. Weaponized versions of this stuff are making their way to consumer levels where you just need to piss off the wrong person online. I donât worry about the US government targeting me beyond normal levels; I worry about employers deploying spyware.
I worry about employers deploying spyware.
If you are using their equipment, it is not spyware and you should expect to be under surveillance when using it.
If you are allowing them to install shit on your devices, the fault is all yours.
Once again, youâre making incorrect assumptions. My concern is employers using the spyware weâre talking about without consent on devices they donât control. Take a minute to think through before responding. Why would I be worried about either of the two things you mentioned?
Unless youâre rotating accounts and not posting anything on the internet ever, going so far as to use an in-memory OS like Tails wonât protect you.
(...) computer worm designed to spread from computer to computer through USB drives.
It absolutely works. My company spends a ton of time and resources in an attempt to prevent folks from plugging in random USB drives.
Classes to user restrictions.
Amazing how some folk are.
Of course, but OP wanted to implicate that this worm stays local in a network. You need an USB stick to carry it over.
I'm pretty sure the word you want is "imply."
Although what the Russians are doing with corrupt USBs is a crime, OP isn't implicated in it.
Thanks for the lesson.. haha
This is just about right :
in fact I wanted to know how we are exposed (or not exposed) to this. ...to know what we have to do to limit exposure.
The company just doesnât want me know whatâs in these usb drives, surely.
Absurd! They could be missing out on so much potential profit!
Have you tried super glue? :-D
Lmfao I'll pass that along.
Also, would this be the same group that hacked the Socchi Winter Olympics, soon after Russia was banned? The one that the US indicted and labelled as a "petulant child"?
Maybe the attribution isn't 100% (as would be expected with how the attacker masked themselves using techniques from every major nation state hacker) but Russian hackers were indeed indicted for it.
Correct. Thatâs what I called out with my second link. Your question was whether Gamaredon did Olympic Destroyer.
Ah I get what you're saying. Would be more helpful if lemmy presented more than one comment in context when replying.
I thought it was a really valuable question! There are several Russian APTs and you made me question my understanding of the attack. I had to reread some stuff to make sure I could answer you properly.
I mean I was mainly joking and shoehorning in another story I knew a bit more about, but thank you for the other links for me to read :)
This is the best summary I could come up with:
A group of Russian-state hackers known for almost exclusively targeting Ukranian entities has branched out in recent months either accidentally or purposely by allowing USB-based espionage malware to infect a variety of organizations in other countries.
âGamaredon continues to focus on [a] wide variety [of] Ukrainian targets, but due to the nature of the USB worm, we see indications of possible infection in various countries like USA, Vietnam, Chile, Poland and Germany,â Check Point researchers reported recently.
The image above, tracking submissions of LitterDrifter to the Alphabet-owned VirusTotal service, indicates that the Gamaredon malware may be infecting targets well outside the borders of Ukraine.
The data suggests that the number of infections in the US, Vietnam, Chile, Poland, and Germany combined may be roughly half of those hitting organizations inside Ukraine.
The core essence of the Spreader module lies in recursively accessing subfolders in each drive and creating LNK decoy shortcuts, alongside a hidden copy of the âtrash.dllâ file.
âComprised of two primary componentsâ-a spreading module and a C2 moduleâitâs clear that LitterDrifter was designed to support a large-scale collection operation,â Check Point researchers wrote.
The original article contains 744 words, the summary contains 185 words. Saved 75%. I'm a bot and I'm open source!
"the malware is written in the Visual Basic Scripting language." is where I stopped đš lol at least we know the Russians are suffering.
Are they? Because if the worm is successfully spreading... đ¤ˇ
It's funny, though..
They're Russians. There's no situation where they aren't suffering.
Theyâve been exporting their suffering to Ukraine the last few years as well.
As a non programmer, isn't visual basic for Excell scripts?
No you can run any .vbs script standalone
Iâm not following. VBScript seems like the right tool. Why would they use something else? Theyâre generally light years beyond US defense capabilities so thereâs a real dearth of suffering on their side.
Now if the joke is that theyâre suffering because they have to use VBScript, I can get behind that
WScript.Echo "Just saying if I was invited onto a team intent on wreaking havoc upon our enemies, I would probably quit after 100 lines of calling windows apis in VBScript" & vbNewLine
tbh I think VBScript is more pleasant to write than C in many cases
Nothing wrong with that! VB isn't fundamentally bad, I'm just accustomed to C family langs
if you're cold, they're cold
put them in the computer at your work
Meanwhile if you load Baofeng software from a few years ago antivirus software today will ping out. It never used to ping out, such is the nature of zero days.
Meanwhile Israel has been selling weapons grade hacking technology for decades, they've been directly linked to the assassination of Jamal Khashoggi as well as the Mexican cartels.
Meanwhile Argentina happens to be the hub for zero day exploits, with a bunch of hackers inventing their own shit and selling directly to state actors or whoever will pay.
The only way you can remain secure is to regularly install a fresh OS. Change my mind.
The only way to be truly secure is to throw your computer into the sea and return, naked and fearless, into the forest from whence we came.
But what about the bears?!?
What part of 'fearless' dont you understand?
I've got naked down pat.
I got that nickname because I used to wear No Fear shirts in High School.
They can come too.
Are they moon bears or saturn bears?
This is just return to monke but more poetic... ... I'm here for it.
... Except for the bugs. I'd rather deal with software bugs than jungle bugs...
Sure. Even regularly installing a new OS doesn't necessarily keep you secure if someone wanted to discreetly install malware on your device. In addition to firmware-level rootkits that re-install themselves on fresh OSs (even platform-agnostic ones), it's possible that someone might interdict whatever hardware is bought and implant it with additional small hardware that compromises it in some way.
They don't even need to work that hard, just compromise the ME/PSP and do whatever.
In the end, if you are not of interest to a nation state hacker (or a member of a drug cartel) you have nothing to fear from the things you listed.
But that won;t change your mind.
Your incorrect assumption is that only cartels and nation states are using said software. Weaponized versions of this stuff are making their way to consumer levels where you just need to piss off the wrong person online. I donât worry about the US government targeting me beyond normal levels; I worry about employers deploying spyware.
If you are using their equipment, it is not spyware and you should expect to be under surveillance when using it.
If you are allowing them to install shit on your devices, the fault is all yours.
Once again, youâre making incorrect assumptions. My concern is employers using the spyware weâre talking about without consent on devices they donât control. Take a minute to think through before responding. Why would I be worried about either of the two things you mentioned?
Unless youâre rotating accounts and not posting anything on the internet ever, going so far as to use an in-memory OS like Tails wonât protect you.
It absolutely works. My company spends a ton of time and resources in an attempt to prevent folks from plugging in random USB drives. Classes to user restrictions. Amazing how some folk are.
Of course, but OP wanted to implicate that this worm stays local in a network. You need an USB stick to carry it over.
I'm pretty sure the word you want is "imply." Although what the Russians are doing with corrupt USBs is a crime, OP isn't implicated in it.
Thanks for the lesson.. haha
This is just about right :
in fact I wanted to know how we are exposed (or not exposed) to this. ...to know what we have to do to limit exposure.
The company just doesnât want me know whatâs in these usb drives, surely.
Absurd! They could be missing out on so much potential profit!
Have you tried super glue? :-D
Lmfao I'll pass that along.
Also, would this be the same group that hacked the Socchi Winter Olympics, soon after Russia was banned? The one that the US indicted and labelled as a "petulant child"?
No. Attribution wasnât clear for Olympic Destroyer; itâs doubtful weâll we ever know the specific APT responsible. Signals intelligence was used to guess at Russian attribution so we at least have a pretty good idea which country launched it.
https://americanmilitarynews.com/2020/10/2447380/
Maybe the attribution isn't 100% (as would be expected with how the attacker masked themselves using techniques from every major nation state hacker) but Russian hackers were indeed indicted for it.
Correct. Thatâs what I called out with my second link. Your question was whether Gamaredon did Olympic Destroyer.
Ah I get what you're saying. Would be more helpful if lemmy presented more than one comment in context when replying.
I thought it was a really valuable question! There are several Russian APTs and you made me question my understanding of the attack. I had to reread some stuff to make sure I could answer you properly.
I mean I was mainly joking and shoehorning in another story I knew a bit more about, but thank you for the other links for me to read :)
This is the best summary I could come up with:
A group of Russian-state hackers known for almost exclusively targeting Ukranian entities has branched out in recent months either accidentally or purposely by allowing USB-based espionage malware to infect a variety of organizations in other countries.
âGamaredon continues to focus on [a] wide variety [of] Ukrainian targets, but due to the nature of the USB worm, we see indications of possible infection in various countries like USA, Vietnam, Chile, Poland and Germany,â Check Point researchers reported recently.
The image above, tracking submissions of LitterDrifter to the Alphabet-owned VirusTotal service, indicates that the Gamaredon malware may be infecting targets well outside the borders of Ukraine.
The data suggests that the number of infections in the US, Vietnam, Chile, Poland, and Germany combined may be roughly half of those hitting organizations inside Ukraine.
The core essence of the Spreader module lies in recursively accessing subfolders in each drive and creating LNK decoy shortcuts, alongside a hidden copy of the âtrash.dllâ file.
âComprised of two primary componentsâ-a spreading module and a C2 moduleâitâs clear that LitterDrifter was designed to support a large-scale collection operation,â Check Point researchers wrote.
The original article contains 744 words, the summary contains 185 words. Saved 75%. I'm a bot and I'm open source!