Hacker News new | ask | show | jobs
by mustache_kimono 815 days ago
> I think the idea this was HUMINT operation by a state sponsored intelligence service is more likely.

It's not an either/or proposition. I definitely think it was state sponsored, AND one method used was social engineering a burned out maintainer.
1 comments
bloak 815 days ago
It seems to me that people are very much exaggerating how "professional" this attack was. Yes, it doesn't look like the actions of a single bored teenager but I don't think the government of a country like the USA or China would deliberately permit their employees to get involved with crap like this. Any backdoor they try to insert would look exactly like an innocent bug. So my (uninformed) guess would be that this is done by criminals, something like a ransomware gang branching out a bit. Though North Korea sometimes sponsors activities that are indistinguishable from those of a criminal gang so it could come from there.

I'm just speculating, of course. I don't know anything really.

link
int_19h 814 days ago
Which "employees"? The anonymous guys in an nondescript office building somewhere?

This is absolutely something Russia could have done.

link
mustache_kimono 815 days ago
> I don't think the government of a country like the USA or China would deliberately permit their employees to get involved with crap like this.

Not the USA, but I can easily imagine this is China. Because, as of right now, this seems like the way China does business. The Chinese/the PLA fund a hacking complex of contractors, and when one gets caught, they simply deny involvement. [0],[1]

[0]: https://www.npr.org/2024/02/22/1233178131/leaked-document-tr...

[1]: https://www.washingtonpost.com/world/2024/02/21/china-hackin...

link