• Hey Guest!
    British Car Forum has been supporting enthusiasts for over 25 years by providing a great place to share our love for British cars. You can support our efforts by upgrading your membership for less than the dues of most car clubs. There are some perks with a member upgrade!

    **Upgrade Now**
    (PS: Upgraded members don't see this banner, nor will you see the Google ads that appear on the site.)
Tips
Tips

Cyber War

Basil

Administrator
Staff member
Boss
Offline
In case any of you didn't know it, the Chinese are engaged in a Cyber war against the US and other western countries. They actually have an Army of government-sanctioned hackers intent on compromising as many systems as they can for nefarious purposes (this is not open to debate, I know it for a fact). Of course, high-profile government, financial and military systems are their primary targets; they also seek to exploit other systems for a variety of purposes. I can speak from personal experience. Whenever there is a break-in attempt on my server, the IP of the intruder is automatically added to my firewall after a certain number of failed attempts. When I get the reports, I trace the IPs and 90 percent of the time, they originate in China (with countries in the middle-east making up a lot of the others). Anyway, the following is an excerpt from an unclassified Intelligence Report I received which is very disturbing, especially if you own on of these Maxtor hard drives:


<span style='font-size: 17pt'><span style="color: #FF6600"><span style='font-family: Arial'>Maxtor Drives Contained Password-Stealing Trojans</span></span></span>
<span style='font-size: 11pt'><span style='font-family: Arial'>Department of Homeland Security, 13 Nov 07: Seagate Technology LLC has shipped Maxtor disk drives that contain Trojan horses that upload data to a pair of Chinese Web sites, the Taiwanese government’s security service warned this weekend. The Investigation Bureau said it suspected mainland China’s authorities were responsible for planting the malware on the drives at the factory. “The bureau said that the method of attack was unusual, adding that it suspected Chinese authorities were involved,” a story posted by the English-language Taipei Times reported Sunday. Seagate confirmed Monday that some Maxtor Basics 3200 drives were infected out of the box, but the company said it had no proof that the Chinese government was involved.
According to the newspaper, about 1,800 Seagate-made drives left a Thailand facility with a pair of Trojan horses preinstalled. The two Trojans, said the Investigation Bureau, “phone home” to a pair of Web sites hosted in Beijing and report all data recorded on the compromised drive. Seagate, however, countered that the only data captured by the on- disk Trojans and sent to the Chinese Web sites were game-related passwords. Internet records show that both sites -- https://www.nice8.org and https://www.we168.org -- were registered with XinNet.cn, one of China’s largest domain registrars. Much of the registration information, however, including the contact name and mailing address, appears to be bogus. The Investigation Bureau identified the infected drives as 500GB models and has demanded that the Taiwanese distributor pull all units from shelves. Of the 1,800 drives reportedly malware-equipped, 1,500 have been removed from the sales channel. The remainder had already been sold. For those customers Seagate will post a 60-day trial version of Kaspersky Labs’ antivirus software on its Web site.</span></span>
 
What the...... lead painted toys, bad food etc., where is my gun?
 
hmmm - as data can't be transmitted across the 'net w/o using the computer's operating system ... shouldn't antivirus and firewall systems already be protecting against that?

yeesh ....

Tom
 
This sort of thing happens far too often, mostly due to carelessness and poor security procedures & quality control. It's been an issue for years, even with packaged software.

EWeek had an article about this Seagate/Maxtor trojan horse about a week ago ( article ) and here 's a recent case in Germany where a virus was shipped with new laptops.

Obviously, the real fault lies with the originator, but companies (and maybe countries?) are way too lax about checking the products they send out.
 
I saw the eWeek article.

With all the lead paint, trojans and suchlike... I guess I can't eat my hard drives anymore, huh? /bcforum/images/%%GRAEMLIN_URL%%/devilgrin.gif
 
The "Snappy Comeback" has just been elevated. /bcforum/images/%%GRAEMLIN_URL%%/thumbsup.gif

...I like mine with lettuce an' tomato...

/bcforum/images/%%GRAEMLIN_URL%%/devilgrin.gif
 
aww...'e'll take th' bit in 'is teef 'n deal wifit.
 
Arggggggggggggh. Totally blindsided and utterly defenseless against this evil Buffetveapon.

"...take th' bit in 'is teef..." indeed! I just tried. Guess what it tasted like....



Maybe 17 minutes of In-a-Gadda-da-Vida....

Life is so cruel....

Oh, and kids; this is an example of <span style='font-family: Courier New'>Thread D r i f t</span>
 
When we ordered new drives for our servers, we would always do a low level format on them, just to make sure they were good, and also to erase anything that might have been on them.

I learned this a long time ago from a sysadmin we had while I was in the Marines. OpSec is paramount in any business.
 
Yup. And zero's to every sector. Twice.
 
DrEntropy said:
The "Snappy Comeback" has just been elevated. /bcforum/images/%%GRAEMLIN_URL%%/thumbsup.gif

...I like mine with lettuce an' tomato...

/bcforum/images/%%GRAEMLIN_URL%%/devilgrin.gif

Just remember to chew well and don't take megabytes! /bcforum/images/%%GRAEMLIN_URL%%/devilgrin.gif
 
We started using a mil spec program, just to be sure. Just like when we dispose of drives, we run the program which over writes the drives five or seven times.

It worked out pretty well, and we made a few bucks back for the company when we would ebay a lot of twenty or so drives.
 
Google "Ultimate Boot CD"* and try that out. A BUNCH of good utilities, different manufacturers, all run from the CD and on a Linux kernel. Very useful.


* No affiliation. I just appreciate good tools.
 
Back
Top