Home > Cybersecurity News > ‘Red October’ Attack Goes Dark After Big Reveal

‘Red October’ Attack Goes Dark After Big Reveal

Tuesday, January 22, 2013 | 8:28 AM Leave a comment Go to comments

A sophisticated cyber-espionage campaign has been successfully penetrating diplomatic, governmental and scientific research organizations across the globe for nearly five years, according to a new report.

Dubbed “Red October,” the malware was first discovered by security giant Kaspersky Lab in October 2012, after the lab’s researchers began investigating a series of cyber attacks against international diplomatic service agencies.

“During the past months, we’ve counted several hundreds of infections worldwide – all of them in top locations such as government networks and diplomatic institutions,” the researchers revealed last week in a report on the issue. “The infections we’ve identified are distributed mostly in Eastern Europe, but there are also reports coming from North America and Western European countries such as Switzerland or Luxembourg.”

According to the lab, Red October has been successfully stealing data from smartphones, removable disk drives, email databases from Microsoft Outlook and from local network FTP servers.

“Based on registration data of the [control-and-command] servers and numerous artifacts left in executables of the malware, we strongly believe that the attackers have Russian-speaking origins,” the researchers concluded, noting that the malware appeared to seek out classified software used by entities like the European Union and NATO.

But just as fast as news of the cyber-espionage campaign spread, Kaspersky Lab on Friday released an additional report to note that the attackers appeared to be closing up shop.

“It’s clear that the infrastructure is being shut down,” Kaspersky security specialist Costin Raiu said in a statement. “Not only [are] the registrars killing the domains and the hosting providers killing the command-and-control servers, but perhaps the attackers [are] shutting down the whole operation.”

While Raiu advised there may still be a number of servers involved that Kaspersky Labs has yet to uncover, for now, it seems the attackers behind Red October know they are being hunted.

____

Following are some additional cyber headlines you may have missed:

FEDERAL NEWS:

DHS losing a senior cybersecurity leader (GovInfoSecurity)

DOD to forge stronger cyber ties with European allies (Defense Systems)

DHS warns of password-cracker targeting industrial networks (NextGov)

NIST cybersecurity center calls for HIE pilot volunteers (GovernmentHealthIT)

INDUSTRY OVERVIEW:

American power plants shut down by cyber attack (Yahoo News)

Yahoo’s CISO departs – with more top execs under CEO scrutiny (All Things D)

INTERNATIONAL  OUTLOOK:

Kenya falls victim to cyber attack (Daily Nation)

Cybersecurity to be tertiary-level subject in India (ZDNet)

UK, NZ to work together on cybersecurity (TV New Zealand)

South Korea says North was behind cyber attack on newspaper (AFP

Facing modern cybersecurity threats in China (Asia Pacific FutureGov)

Iran beefed up its own cyber security after Stuxnet, says US general (Reuters)

Singapore Government strengthens cyber attack prevention laws (Out-Law.com)

HACKING HIGHLIGHTS:

A hacker says smart grid can be penetrated (New York Times)

Hacker Olympics draws top students to Silicon Valley (Mashable)

How M.I.T. ensnared a hacker, bucking a freewheeling culture (New York Times)

CYBER INSIGHTS:

Cyberwar’s gray market (Slate)

4 steps for proactive cybersecurity (InformationWeek)

Random security predictions for 2013 (Network World)

4 ways to prepare for and fend off DDoS attacks (CIO Magazine)

Cybersecurity soon to be subject in varsities, tech colleges (The Economic Times)

____

This report is also available on ClearanceJobs.com at: http://www.clearancejobs.com/defense-news/1071/cybersecurity-news-round-up

Advertisements
  1. Thursday, May 29, 2014 | 1:50 AM at 1:50 AM

    I’ve just produced software that will help automatically scrape
    appropriate contents of a topic (or even topic yuor web blog is centered on) from the bing and yahoo to build massive 100% copyscape passed content.
    Were you fascinated to examine it?

  2. Saturday, September 20, 2014 | 8:43 PM at 8:43 PM

    My partner and I stumbled over here coming from a different web
    page and thought I should check things out. I like what I see so now i am following you.

    Look forward to checking out your web page again.

  3. Tuesday, September 23, 2014 | 1:37 AM at 1:37 AM

    Hello, this weekend is pleasant in support of me, because this occasion i am
    reading this great informative article here at my house.

  4. Friday, October 3, 2014 | 3:39 PM at 3:39 PM

    Hey! This post could not be written any better!
    Reading through this post reminds me of my good old room mate!
    He always kept talking about this. I will forward this post to him.
    Fairly certain he will have a good read. Many thanks for sharing!

  5. Tuesday, February 10, 2015 | 3:06 PM at 3:06 PM

    I shall covers topics of crucial significance to anyone who desires to breakk into the music conpany and
    grow to be a pop star or recording artist.

  6. Tuesday, June 9, 2015 | 11:37 AM at 11:37 AM

    Good info. Lucky me I discovered your website by
    chance (stumbleupon). I’ve saved it for later!

  1. Friday, February 1, 2013 | 3:55 PM at 3:55 PM

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: