Latest news
Hackers have targeted five international oil companies and have extracted sensitive corporate information about oil- and gas-field operations, project financing and bidding, claims security firm McAfee in a recently released report.They would not name the companies involved, but their names are know to the FBI who have already started an investigation into the matter. McAfee claims that the attacks were - and are still - "coordinated, covert and targeted", and that it seems that they originate in China.
The goal of the attack seems pure industrial espionage, and there is on evidence so far of any action from the hackers that would qualify as sabotage. It seems that the attacks began in 2009, but there are also some indications that 2007 could have been the starting year.
Dubbed "Night Dragon" by McAfee, the attacks have been focusing on the energy sector, but the same tools and techniques can be used for targeting any other industry, and that is what worries the US most.
Its intelligence agencies have already warned the country's biggest and economically most crucial companies about the fact that China possesses the capabilities and the motivation to effect such attacks.
According to The Wall Street Journal, the attacks have been perpetrated with hacking tools of mainly Chinese origin and from a Chinese Internet addresses in Beijing.
Amazingly enough, the attackers seemingly saw no need to cover their tracks, and according to Dmitri Alperovitch, McAfee's VP of threat research, they seem to be "company worker bees" that "operated on a strict weekdays, nine-to-five Beijing time-zone schedule."
He also said that the attacks seem organized, but that it was impossible to say whether they were directed by the private or the public sector. McAfee's research discovered that the external servers used by the attackers are provided by one Song Zhiyue from Heze City in the Shandong Province. When contacted by reporters, he denied knowing anything about the attacks.


Spotlight

The security of WordPress plugins
Posted on 18 June 2013. | Checkmarx’s research lab identified that more than 20% of the 50 most popular WordPress plugins are vulnerable to common Web attacks, such as SQL Injection.

Information security executives need to be strategic thinkers
Posted on 17 June 2013. | George Baker, the Director of Information Security at Exostar, talks about the challenges in working in a dynamic threat landscape, offers tips for aspiring infosec leaders, and more.

Large orgs in denial about own security breaches?
Posted on 14 June 2013. | Over two thirds (66%) of large organizations said they either had not experienced a security incident in the last 12-18 months or were unsure if they had.

Vulnerability scanning with PureCloud
Posted on 12 June 2013. | nCircle PureCloud is a cloud-based network security scanning product built upon the companies' vulnerability and risk management system IP360.

Reactions from the security community to the NSA spying scandal
Posted on 11 June 2013. | Read on for comments on this scandal that Help Net Security received from a variety of security professionals and analysts.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







