Technology

59982 readers

3902 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 2 years ago

MODERATORS

211

Two never-before-seen tools, from same group, infect air-gapped devices (arstechnica.com)

submitted 2 months ago by [email protected] to c/technology

46 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 9 points 2 months ago (1 children)

So far, we haven’t been able to trace back to the initial compromise vector in the campaigns seen in our telemetry.

They hypothesize that attaching a compromised USB drive to an air gapped system is to blame. That seems to be a well known vector at this point. Does it matter much what tool is used to copy data once it’s in?

[+] JordanZ 1 points 2 months ago (2 children)

[deleted]

[–] [email protected] 2 points 2 months ago (1 children)

People literally just drop usb drives in the parking lot of places they want to compromise hoping some idiot will plug it into a machine inside.

You say that like it's some common occurrence. Is it? As far as I know the CIA, FBI, or NSA (Can't remember) did a test where they did that in their own parking lot and lots of people fell for it. But is there any evidence of it being done maliciously?

[–] ATDA 2 points 2 months ago

Even if it isn't an intentional attack you don't want people bringing God knows what on USB sticks that may or may not just be infected from the users own home PC. USB storage devices are lovely targets.

But yeah the South Korean military got infected by a soldier plugging in a planted USB stick.

I think the narrative of a targeted attack is easier to sell though. Make it us vs them and people grasp the concept a little better. This is very common in information security training in a lot of fields in my experience.

[–] linearchaos 1 points 2 months ago

There are USB cables that do this now. Air capped machines need to be better about sanitizing USB.