[LINK] GhostNet

[Tom Koltai]

Full Report at  http://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-746.pdf


> -----Original Message-----
> From: link-bounces at mailman1.anu.edu.au 
> [mailto:link-bounces at mailman1.anu.edu.au] On Behalf Of 
> stephen at melbpc.org.au
> Sent: Sunday, 29 March 2009 7:05 PM
> To: link at anu.edu.au
> Subject: [LINK] GhostNet
> 
> 
> Brenda forwards,
> 
> > http://www.f-secure.com/weblog/archives/00001636.html
> > has a good explanation of the conficker/downadup worm
> 
> 'Vast Spy System Loots Computers in 103 Countries'
> 
> (Nb1, "Ghostnet, can turn on cameras and audio-recording 
> functions ..") (Nb2, no mention, in either news reports, re 
> specific operating systems) 
> 
> by JOHN MARKOFF nytimes.com Published: March 28, 2009 (also) 
> http://www.guardian.co.uk/world/2009/mar/29/china-computing
> 
> 
> TORONTO - A vast electronic spying operation has infiltrated 
> computers 

<SNIP>

Comments:
Ghostnet is not exclusively Chinese.
Our perambulations in this field would indicate that the dissemination
of the malware is achieved by phishing organisations that are funded by
others...... With reports going back to the funders of interesting
successful incursions.

Think Fagan - Oliver Twist.

Interestingly - we just offerred a major accounting firm an interdiction
potential against this type of activity - and their response was that it
was not part of their core business.

We live in interesting times.

Tom


_______________________________________
No viruses found in this outgoing message
Scanned by iolo AntiVirus 1.5.6.4
http://www.iolo.com