
Tuesday, May 3, 2022
David Walden, Computer Scientist at Dawn of Internet, Dies at 79

Good Products and Bad Businesses

How hackers used smarts and a novel IoT botnet to plunder email for months

It’s not the kind of security discovery that happens often. A previously unknown hacker group used a novel backdoor, top-notch trade craft, and software engineering to create an espionage botnet that was largely invisible in many victim networks.
The group, which security firm Mandiant is calling UNC3524, has spent the past 18 months burrowing into victims’ networks with unusual stealth. In cases where the group is ejected, it wastes no time reinfecting the victim environment and picking up where things left off. There are many keys to its stealth, including:
- the use of a unique backdoor Mandiant calls Quietexit, which runs on load balancers, wireless access point controllers, and other types of IoT devices that don’t support antivirus or endpoint detection. This makes detection through traditional means difficult
- customized versions of the backdoor that use file names and creation dates that are similar to legitimate files used on a specific infected device
- a live-off-the-land approach that favors common Windows programming interfaces and tools over custom code with the goal of leaving as light a footprint as possible
- an unusual way a second-stage backdoor connects to attacker-controlled infrastructure by, in essence, acting as a TLS-encrypted server that proxies data through the SOCKS protocol
A tunneling fetish with SOCKS
In a post, Mandiant researchers Doug Bienstock, Melissa Derr, Josh Madeley, Tyler McLellan, and Chris Gardner wrote:
How Elon Musk Winged It With Twitter, and Everything Else

Monday, May 2, 2022
Partisan Fight Breaks Out Over New Disinformation Board

How to Watch the Rocket Lab Launch Today

Another Firing Among Google’s A.I. Brain Trust, and More Discord

Meet the Anthropic Engineer Keeping Its AI Agent Trustworthy
<img src="https://spectrum.ieee.org/media-library/an-indian-man-in-a-dress-shirt-smiling-in-front-of-the-entrance-to-an-office-buil...
-
<img src="https://spectrum.ieee.org/media-library/industrial-robotic-arm-with-cable-management-system-and-flexible-energy-chains.jp...
-
Despite the company’s fast growth during the pandemic, the market for technology stocks appears to have cooled.
-
Fifty years ago, DRAM inventor and IEEE Medal of Honor recipient Robert Dennard created what essentially became the semiconductor indust...