How to Bury a Major Breach Notification
Summary: RSA researchers reported a malware campaign dubbed "Kingslayer" that compromised the download page and software update server of an event log management tool from April 9 to April 25, 2015, so companies with the software installed would have automatically pulled the backdoored version. RSA's April 2016 sinkholing of the control server oraclesoft[dot]net showed victims including five major defense contractors, four major telecommunications providers, 10+ western military organizations, more than two dozen Fortune 500 companies, 24 banks and financial institutions, and at least 45 higher educational institutions.
What's compelling: The vendor, Altair Technologies, published its breach notice on June 30, 2016 with no link from anywhere else on its site, and its owner told Krebs he keeps no record of who downloads the software - so the defense contractors, banks and military organizations on its own customer lists had no reliable way to learn they might be running a backdoor.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026