China hacking WADA

[JMBeaushrimp]

Just heard that 'an unnamed country' has been busted hacking into certain government sites (US financial, primarily), as well as WADA.

Apparently it's China behind it.

Admittedly a pretty easy scapegoat, for both of the above reasons.

Anyone have any more info?

 

[Master50]

I think there was a CBC story today about McAfee having discovered some big security breaches of quite a few big companies and organizations including the IOC

 

[this_is_edie]

"McAfee's white paper that details the exploits of Shady RAT does not mention who might have been perpetrating this particular APT. McAfee released the report to Vanity Fair that has made the assertion that the campaign probably originates in China. While that may be true, McAfee itself does not make that assertion. The reasoning behind blaming China is fairly simple - the data shows that almost every major country around China was hacked except for China itself. There is also the bit where the IOC (and Olympic committees for various countries) were hacked just ahead of the Bejing summer games in 2008. In that regard, the World Anti-Doping Agency (WADA) was also hacked.

Read more: Operation Shady RAT May Be the Biggest Hack in History, But It is No Surprise

 

[Andynonomous]

I wouldn't be surprised if it was China. China is the world's number 1 thief of intellectual property rights.

 

[neineinei]

http://www.mcafee.com/us/resources/white-papers/wp-operation-shady-rat.pdf

Intrusion started August 2009 and lasted for 14 months.

IOC and at 3 national Olympic committees are also mentioned in the list.

 

[neineinei]

The Olympic committees are not identified in the report, but by comparing the list of 72 targets and the list of how many targets there are in each country the "Olympic Committee of Western country" (+ "Western Non-profit Democracy-promoting organization") must be from USA, and "Olympic Committee of Asian Country #1" or "Olympic Committee of Asian Country #2" (+ Trade Organization from Asian country) must be from Japan, and the other Asian Olympic Committee must be from Taiwan.

(I'm not sure what it says about McAfee if it is correct that my counting was all it took to crack their attempt to conceal which Olympic committees witch were affected.)

 

[ElChingon]

Too bad it wasn't the lutz group, they'd hopefully would of released some doc's

 

[DirtyWorks]

Just heard that 'an unnamed country' has been busted hacking into certain government sites (US financial, primarily), as well as WADA.

Apparently it's China behind it.

Admittedly a pretty easy scapegoat, for both of the above reasons.

Anyone have any more info?

Guys, I look at intrusion logs on a regular basis and I promise you, China is not very special. I don't really understand why China gets all the abuse when they aren't too special in this regard.

And, put this in perspective. We're talking about PR from companies whose sole business is to 'protect' operating systems with elaborate and poorly implemented security framework. (if you don't want to run Linux, buy a Mac)

I'm more interested to know if it's targeted intrusion or just the usual robots finding an open door.

 

[Oldman]

I wouldn't be surprised if it was China. China is the world's number 1 thief of intellectual property rights.

Using protocol and direction from former Soviet guys. They know their stuff. A racing friend is an FBI agent spending lots of time on e-fraud and he rates the Russians and Hungarians as A+ for quick in-out creativity. They get the data/money the seek and leave very little trail to find.

 

[hrotha]

The Olympic committees are not identified in the report, but by comparing the list of 72 targets and the list of how many targets there are in each country the "Olympic Committee of Western country" (+ "Western Non-profit Democracy-promoting organization") must be from USA, and "Olympic Committee of Asian Country #1" or "Olympic Committee of Asian Country #2" (+ Trade Organization from Asian country) must be from Japan, and the other Asian Olympic Committee must be from Taiwan.

(I'm not sure what it says about McAfee if it is correct that my counting was all it took to crack their attempt to conceal which Olympic committees witch were affected.)

I don't think the point is to hide anything, but to avoid legal trouble. They'd probably be pleased to know their readers can figure it out.

 

[davestoller]

Piers Morgan

 

[python]

<snip>
I'm more interested to know if it's targeted intrusion or just the usual robots finding an open door.

According to this article the attacks were targeted by a single actor/group.

wada denied being compromised:

“WADA has a highly-sophisticated security system in place which is managed by ISS (IBM), and with the information available to it ISS has to-date found no evidence of this corruption.

someone here is not telling the truth.

should wada drag mcafee to cas for taking a hallucinogenic ?