GCHQ (the UK twin of the NSA) hacked the Belgian telecommunications firm Belgacom using fake LinkedIn profiles to deliver malware. - The fake profiles were identical to the originals except for a malware payload that turned Belgacom computers into zombies controlled by GCHQ. - In a probably unconscious reference to James Bond, the programme was called Quantum Insert. - The Quantum insert technique involves monitoring targets (who are not suspected of any wrongdoing themselves, they are simply a way in to the system) in some detail, capturing information such as Skype, Gmail and social networking details, and the IP address of home and work computers. - Using this information, the attacks were developed specifically for each target. - When the target accessed LinkedIn, instead they were supplied with an exact copy that included the malware. The success rate is claimed to be over 50%. - Once Belgacoms network was compromised the British operatives could move on to cracking encrypted connections supplied by the network, which presumably enabled them to access their real targets. - All the companies allegedly compromised or involved deny cooperating with the exploit. - GCHQ claims that only people whose activities pose a threat to the national or economic security of the United Kingdom are monitored. More details: Quantum Spying: spiegel.de/international/world/ghcq-targets-engineers-with-fake-linkedin-pages-a-932821.html
Posted on: Thu, 14 Nov 2013 19:01:35 +0000
Trending Topics
Recently Viewed Topics
© 2015