More on the ‘Aurora’ Attacks
In Lavasoft CEO Jason King’s commentary on the cyber attacks that targeted Google and dozens of other high profile targets, he noted that these so-called Aurora attacks were heard about and felt all around the Web, and around the World, making them of interest to us all to see what else develops. In just one week since that report was published, there have been a number of developments and interesting industry commentary on this.
So, for those following this story, here are a few of these updates:
- A security researcher’s analysis uncovered what’s believed to be strong evidence that the attacks came from China. Meanwhile, late last week, U.S. Secretary of State Hillary Clinton gave a speech on Internet freedom and urged China to investigate the attacks. However, China’s government has formally denied involvement in the attacks, and a Chinese official responded that Clinton’s speech could “undermine China-US relations.”
- Sophisticated, targeted, ‘Aurora-style’ espionage attacks hit at least three large US oil companies in 2008, The Register and The Christian Science Monitor report.
- In his “Beware the Botnets” piece on CSOonline, security blogger Brian Krebs looks at the botnet angle behind the attacks – how botnets have enabled a ‘democratization of espionage.'
- In a new twist on the attack vectors used to hit Google and the other involved companies, according to a report in The Financial Times, attackers may have specifically targeted key employees and impersonated their friends on social networking sites to trick the victims into downloading malware.
We'll continue to keep you updated here with more news on this as it relates to your security.