News

Other articles

Sunday 14 March 2010
Article  Cloud security assessment scheme launched

Sunday 14 March 2010
In Brief  Human element undermines encryption

Thursday 11 March 2010
Article  Digital privacy framework steps closer?

Monday 8 March 2010
Audio Podcast  Web 2.0 and Social Networks in the Enterprise

Sunday 7 March 2010
Article  Digital Economy Bill raises privacy concerns

Wednesday 3 March 2010
Article  Cloud security threats identified by CSA

Tuesday 2 March 2010
In Brief  Vote for your CSO Interchange topics

Thursday 25 February 2010
Article  Cloud Computing : a simple question of supplier risk

Monday 22 February 2010
Article  Most dangerous coding errors outed

Monday 22 February 2010
In Brief  Microsoft IE users to get browser choice update

Friday 19 February 2010
Article  Google Buzz fail highlights privacy expectation rise

Thursday 18 February 2010
In Brief  Annual hacking challenge aims for mobiles and browsers

Wednesday 17 February 2010
Audio Podcast  The Challenges of Cross Border eID

Monday 15 February 2010
Audio Podcast  The Readiness of eID in Europe Part 2

Sunday 14 February 2010
Audio Podcast  The Readiness of eID in Europe Part 1

Operation Aurora 'nothing new'

Marketing and politics vs tech
Written by Mark Mayne (SecurityVibes)
Published on Wednesday 20 January 2010
0 comment(s) | Subnetwork United Kingdom
 

The Aurora compromise of Google via a zero-day flaw in Internet Explorer 6 is actually nothing new, according to security researchers.

Mary Landesman, senior researcher, ScanSafe, said: “These were very targeted attacks, but nothing special in terms of what we all see every day. Many Trojans are given names by security companies like 'gamerpassword stealer' but this is rubbish – modern malware will behave differently depending on the resources of the system it has compromised. Zero-day flaws in widely-installed products are a fact of daily life, not a one-off incident.”

Landesman continued: “I think Google deserves praise for coming forward and admitting the issue, which is something that few enterprises have been comfortable doing in the past, but the fear, uncertainty and doubt (FUD) that has been spread around by some other vendors has undone much of the good that was achieved. A lot of the bigger picture has been lost in the detail.”

Initially reported by Google as a "a highly sophisticated and targeted" cyber attack originating from China, the compromise – dubbed 'Operation Aurora' - of up to 30 companies including Adobe and Rackspace has seen intense speculation and interest. Reaction has been unusually broad, with even the German and French governments weighing in with warnings to citizens that all versions of IE are dangerous, and urging the choice of another browser.

"The attacks we have seen to date, including the exploit released publicly, only affect customers using Internet Explorer 6," said Microsoft in a statement."We recommend users of IE 6 on Windows XP upgrade to a new version of Internet Explorer and/or enable DEP", Microsoft said in its analysis. "We also recommend users of Windows XP upgrade to newer versions of Windows."

The initial compromise was reportedly aimed at compromising a series of Gmail accounts used by Chinese anti-government activists. However, the widening scope of the compromises

Landesman continued: “I also wonder how exclusively Chinese these were – some of the terms used in the code are more indicative of Morocco and India, and it's these small, innocent hints that arouse one's suspicions.”

Whether genuinely Chinese or not, the attacks have caused potentially serious political ripples, with Google cancelling the launch of several phones in China alongside general threats to withdraw entirely from the Chinese market. How much this is due to the recent attacks, and how much the ongoing censorship demands by the Chinese government is debatable.

Our members have posted 0 comments about this article. Only members can view and submit new comments.
Related contents
Advertising
Related Questions & Answers
Companies
Most commented
Most Popular
+
 
Related companies
Microsoft
Read members opinions and rate Microsoft too !
Ratings  0
Qualys (3 fans)
Read members opinions and rate Qualys too !
Ratings  0
F-secure
Read members opinions and rate F-secure too !
Ratings  0
Eset
Read members opinions and rate Eset too !
Ratings  0
Keross (1 fans)
Read members opinions and rate Keross too !
Ratings  0
Search
Our RSS Feeds
Subscribe to our RSS feeds for free !
Social Web