俄羅斯的軍事間諜軟件在數以十萬計的家庭路由器上
Russian Military Spy Software is on Hundreds of Thousands of Home Routers
Russian Military Spy Software is on Hundreds of Thousands of Home Routers
AUGUST 14, 2018
In May, the Justice Department told Americans to reboot their routers. But there's more to do — and NSA says it's up to device makers and the public.
LAS VEGAS — The Russian military is inside hundreds of thousands of routers owned by Americans and others around the world, a top U.S. cybersecurity official said on Friday. The presence of Russian malware on the routers, first revealed in May, could enable the Kremlin to steal individuals’ data or enlist their devices in a massive attack intended to disrupt global economic activity or target institutions.
On May 27, Justice Department officials asked Americans to reboot their routers to stop the attack. Afterwards, the world largely forgot about it. That’s a mistake, said Rob Joyce, senior advisor to the director of the National Security Agency and the former White House cybersecurity coordinator.
“The Russian malware is still there,” said Joyce.
On May 8, cybersecurity company Talos observed a spike in mostly Ukrainian victims of a new malware attack. Dubbed VPNFilter, the malware used code similar to the BlackEnergy tool that Russian forces have used (in modified form) to attack Ukrainian infrastructure. The U.S. intelligence community believes the culprits are the hackers known as APT 28 or Fancy Bear, Russian military operatives who were behind information attacks against the Democratic National Committee, State Department, and others. The new malware, if activated, could allow the Russian military to peer into the online activities of hundreds of thousands of people.
“The Cisco-Talos reports on the incident estimated hundreds of thousands of devices affected worldwide,” Joyce said.
Specifically, the May 23 report said, at least 500,000 victims in up to 54 countries.
沒有留言:
發佈留言