Skip to main content

Equifax breach shows signs of a possible state-sponsored hack

© Provided by Engadget Ever since word of the Equifax hack got out, there's been one lingering question: was it a state-sponsored attack, or just criminals who took advantage of a security hole? At the moment, it looks like it might be the former. Bloomberg sources have shed light on the ongoing investigations into the breach, and they claim there are signs of a government's involvement. The initial group of hackers weren't particularly experienced, according to the tipsters, but they handed things over to a more "sophisticated" team. There are even hints that this might be the work of Chinese intelligence agents, although it's not yet clear who's responsible.

The insiders say that "many" of the tools used in the hack were Chinese in origin, and that there are similarities to China-backed breaches targeting the health insurance firm Anthem and the US government's Office of Personnel Management. Also, none of the stolen data has surfaced online -- whoever took it wasn't in a rush to profit. This was a "'get as much data as you can on every American' play," one of Bloomberg's contacts said.

However, sources aware of federal investigations say only that there's evidence of a state-sponsored attack, not that it points to any one country. Equifax's security consulting partner, Mandiant, wrote as recently as September 19th that it couldn't identify the culprits or where they came from.

As it is, Equifax may have been its own worst enemy in the early days of the breach. The company had hired Mandiant to look into earlier security issues, but there was a he-said-she-said fight over Equifax's security in the weeks surrounding the hack. Equifax reportedly thought Mandiant had sent rookies to look into the vulnerabilities of its systems, while Mandiant decried what it saw as unpatched systems and sloppy policies. An Equifax spokesperson told Bloomberg that it has had a "professional, highly valuable relationship" with Mandiant and isn't commenting on its ally's investigation, but the scoop suggests that the squabble may have hurt the chances of a timely fix for the flaw that compromised 143 million Americans.

Whatever contributed to the incident, there are significant ramifications if there's a foreign power involved. If it's China, it'd be a huge violation of the US-China agreement that was supposed to put an end to hacking campaigns. Many didn't expect either side to fully honor the pact, but this would be an overt violation. And if it's another known country with state-sponsored hacking, like North Korea or Russia? That wouldn't be any better, as it would exacerbate already high tensions. No matter who's behind this, things could get very thorny very quickly.

Bloomberg

Popular posts from this blog

Tech 2017: Biggest fails, scandals and embarrassments

© Provided by IBT US This year brought many tech innovations and products, like the iPhone X, virtual reality headsets and augmented reality on apps. However, the tech industry also saw failures this year. Like all businesses, not all products or ideas succeed. The tech industry saw some of its gadgets fail to take off. Besides product failures, the sector was also plagued by scandals and congressional testimonies. Here are the tech industry’s 2017’s top product flops and scandals: Amazon Key In late October, Amazon announced a new delivery method for Prime members which allows drivers to set packages inside customers’ home . The delivery system works with the Amazon Key In-Home Kit that is set up for $249.99. With the kit, users can select the “in home” option on the app and get their items delivered inside their homes. Prime members can receive alerts and can see the delivery happen in real-time through the app. While the service was pitched to people who are too busy to s...

R. Tiglao Exposed LTO Records Showing Aquino Never Bought or Sold a Porsche

Veteran columnist Rigoberto Tiglao exposed the Land Transportation Office (LTO) records of former President Benigno Aquino III showing that he never bought or sold an expensive Porsche car. The LTO records proved that the former President did not sold his Porsche 911 Carrera car which he claimed he bought for P5 million. The controversial Porsche car of the former President made headlines just months into his presidency but he explained that he bought the luxury car with the proceeds he got when he sold his BMW. Because of the furor from such display of opulence, Pres. Aquino claimed to have sold it six months later for exactly the same price. According to Tiglao during that time he asked through his column the LTO to release the car's deed of sale and registration to prove that it was not a gift from a Chinese-Filipino tycoon as rumored by some individuals critical to the President. The only possible way to discover whether the Porsche luxury was indeed sold was through ...

Aktor, iniwan ang ina

PAREHAS may pinagdaanan sina Jericho Rosales at Erich Gonzales noong gawin nila ang “Siargao,” entry sa MMFF. Namatay ang daddy ni Jericho na hanggang ngayon ay hindi niya matanggap na wala na ito. Miss na miss na niya ang kanyang daddy. Nag-break naman sina Erich at Daniel Matsunaga. In a way, nakatulong kina Jericho at Erich ang pagiging abala nila sa shoot ng “Siargao” and somehow, naibsan ang kanilang kalungkutan. A month or so nanatili sila sa Siargao at gandang-ganda sila sa mga lugar na pinag-syutingan nila. Stress-free raw. Hindi na-link sa isa’t-isa sina Jericho at Erich. Taken na kasi si Jericho at happily married kay Kim Jones. Unexpectedly, kay direk Paul Soriano na happily married kay Toni Gonzaga natsismis si Erich. Walang naniwala sa ka-cheapang isyu. Nagamit pa si Toni na kuno’y pinagselosan si Erich. Balitang may non-showbiz guy na nagpapasaya ngayon ng puso ni Erich. Ang ex-boyfriend niyang si Daniel Matsunaga ay isang model mula sa Poland ang love of his life ...