Hacker News new | ask | show | jobs
by tptacek 3547 days ago
Well if SABU disagrees with Mandiant and CrowdStrike...
1 comments

Hmm, their claims don't actually necessarily disagree that I can see. One says this RAT is used by Russians, the other says it's available to more than just the government.

If anyone truly wants to refute it, they just have to visit the forums SABU found and figure out if it's the right tool or not.

The RAT(s) used aren't the only IOC here!
True. But if they missed finding one thing that's publicly available, how can we say they missed nothing else? It's a big internet out there. I don't think anyone can say that things are unavailable, only that they haven't seen them.