
Tuesday, May 3, 2022
David Walden, Computer Scientist at Dawn of Internet, Dies at 79

Good Products and Bad Businesses

How hackers used smarts and a novel IoT botnet to plunder email for months

It’s not the kind of security discovery that happens often. A previously unknown hacker group used a novel backdoor, top-notch trade craft, and software engineering to create an espionage botnet that was largely invisible in many victim networks.
The group, which security firm Mandiant is calling UNC3524, has spent the past 18 months burrowing into victims’ networks with unusual stealth. In cases where the group is ejected, it wastes no time reinfecting the victim environment and picking up where things left off. There are many keys to its stealth, including:
- the use of a unique backdoor Mandiant calls Quietexit, which runs on load balancers, wireless access point controllers, and other types of IoT devices that don’t support antivirus or endpoint detection. This makes detection through traditional means difficult
- customized versions of the backdoor that use file names and creation dates that are similar to legitimate files used on a specific infected device
- a live-off-the-land approach that favors common Windows programming interfaces and tools over custom code with the goal of leaving as light a footprint as possible
- an unusual way a second-stage backdoor connects to attacker-controlled infrastructure by, in essence, acting as a TLS-encrypted server that proxies data through the SOCKS protocol
A tunneling fetish with SOCKS
In a post, Mandiant researchers Doug Bienstock, Melissa Derr, Josh Madeley, Tyler McLellan, and Chris Gardner wrote:
How Elon Musk Winged It With Twitter, and Everything Else

Monday, May 2, 2022
Partisan Fight Breaks Out Over New Disinformation Board

How to Watch the Rocket Lab Launch Today

Another Firing Among Google’s A.I. Brain Trust, and More Discord

Navigating the Pivot From Tech Expert to Organizational Leader
<img src="https://spectrum.ieee.org/media-library/a-young-black-woman-speaking-into-a-microphone-while-seated-in-an-auditorium-crow...
-
In the 1980s and 1990s, online communities formed around tiny digital oases called bulletin-board systems. Often run out of people’s home...
-
Ensuring the integrity of the research IEEE publishes is crucial to maintaining the organization’s credibility as a scholarly publisher. ...
-
Enlarge (credit: Getty ) After reversing its positioning on remote work, Dell is reportedly implementing new tracking techniques on ...