Cyber Risks · Krebs on Security

Source: Washington Post Also Broadly Infiltrated By Chinese Hackers in 2012

Summary: A former Washington Post IT employee said Chinese cyberspies compromised at least three servers and many desktops at the paper throughout 2012, planting malware that let attackers keep access and transmit domain usernames and passwords. The Post brought in several forensics firms led by Mandiant, and NSA and Defense Department experts took one server for analysis, while the Post declined to comment before later publishing its own story confirming the claims.

What's compelling: The intruders had what the source described as the ability to do anything they wanted on the network and to hide their tracks, and the paper's Symantec antivirus failed to detect the malware - a reminder that detection and eviction, not just prevention, decide how long an attacker stays.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related