Dark Reading, Feburary 15, 2016
Sony hackers are still active, “they didn’t disappear when the dust settled” after the Sony attacks, says Juan Andres Guerrero-Saade, senior security researcher at Kaspersky Lab at the Security Analyst Summit. There has been a noticeable shift in how some advanced threat groups such as this respond after being publicly outed by security researchers. Historically, cyber espionage gangs would go dark. “They would immediately shut down their infrastructure when they were reported on,” said Kurt Baumgartner, principal security researcher with Kaspersky Lab. “You just didn’t see the return of an actor sometimes for years at a time.” This change in the reaction to publicity has also been seen in Darkhotel, the attack group known for hacking into WiFi networks at luxury hotels. After their exposure they lay low, but did not hide, showing the lack of concern about infrastructure and public exposure and more consideration for the protection of their advanced attack techniques.
Click here to read more.
