APT Stands for "Advanced Persistent Threat". It is usually used in reference to a threat posed by a group with the capability and intent to persistently and effectively carry out cyber attacks against specific entities. APT has been used to refer to either the perpetrators, or the actual hack ...

learn more… | top users | synonyms

2
votes
3answers
497 views

What is the current best practice to secure an executive's laptop?

What is the current best practice to secure an executive's laptop? The exec will be processing highly sensitive documents (high-value bids, merger & acquisition info, technical specs). As such ...
27
votes
3answers
3k views

Malware that can survive BIOS re-flashing

The well-respected security consultant Dragos Ruiu is reporting that he has been infected with mysterious malware that can survive re-installation of the OS and re-flashing of the OS. In other words, ...
1
vote
2answers
64 views

Is the Linux / Debian software and package-management ecosystem secure?

My basic question is this: When we are using the Linux / Debian apt-get or yum package system, we're placing a lot of faith in that the packages we're downloading and installing are secure. For that ...
2
votes
2answers
427 views

What are the most sophisticated techniques used by intruders you have found in the wild?

I am beginning to get involved in incidents, some of them are APT (Advanced Persistent Threat). Despite the complexity available in the 'bibliography' and in the conferences or security e-zine, the ...
4
votes
3answers
189 views

How often do high-end attackers actually use zero-day exploits?

Earlier this week the head of the NSA's Tailored Access Operations unit rather remarkably gave a presentation at the USENIX Enigma security conference. (News coverege here and here; video of the talk ...
0
votes
3answers
96 views

How to successfully prevent advance persistent threats

With the topic of advance persistent threats (APT) getting common nowadays, how do you successfully prevent such an attack in the workplace? Do you have to purchase expensive tools, such as those from ...
1
vote
1answer
94 views

Can OnionDuke malware actually spread to new systems through an image?

I do realize that questions about malware in images has been asked before. It just does not look like they answer the questions in this particular situation. This is about the OnionDuke APT malware ...
8
votes
2answers
937 views

Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?

With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit in the wild are we now actually in the age of Advanced Persistent Threats (APT) for personal computers and does that imply ...
4
votes
1answer
180 views

Securing administration network

We would like to secure our administration network from advanced persistant threats and also from rogue administrators. I have already read the best practices from SANS Institute, NSA or other guides. ...
1
vote
1answer
88 views

Are Skype drive-by attacks theoretically possible?

Long story short, I was on my iPhone when this Skype account tried to send me a "picture" but before it could download (I saw what looked like a downloading bar) I left the message and blocked the ...
4
votes
0answers
176 views

What does Lockheed's StarVision do and what are some comparable products on the market? [closed]

I consult for a client who has Lockheed's StarVision as part of their advanced persistent threats tool set. For various political and business reasons, I have not been able to get a close-up look of ...
99
votes
8answers
20k views

What would one need to do in order to hijack a satellite?

I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites. What would be required to hack a satellite (in general terms, any hack ...
3
votes
7answers
1k views

Which forensic techniques should I use to identify intrusion or monitoring of my computer or cellphone

If I suspect my computer or cellphone is being monitored by an unknown attacker, what tools or techniques could I use to detect or identify such monitoring?
0
votes
2answers
79 views

Which mechanism did Flame use to avoid being identified?

I got a question that says "What is the major difference in the USB propagation system used by Flame with regard to Stuxnet to prevent being identified?". After Googling for a while, I haven't found ...
6
votes
2answers
964 views

Detecting Pass-the-Hash

I was wondering what you guys are doing to detect attacks like Pass-The-Hash within your network. I've read about Breachbox http://www.darkreading.com/monitoring/researcher-to-open-source-tools-for-...
11
votes
5answers
450 views

Government / State cyberwarfare organizations

I am working on some research regarding advanced persistent threats. Within this effort, discussion of cyber-warfare started. Looking further into the subject, I have found a plethora of links ...
5
votes
5answers
347 views

Is there a simple and highly secure office suite?

I am designing a highly restricted workstation build for a secure environment. At the minute this is planned to use Windows 7, but I am considering Linux. The users will on occasion open documents ...
6
votes
1answer
210 views

Single point of failure: can US government requests for passwords be a vector for attack?

In recent news, CNET has reported requests for passwords, hashing and/or encryption algorithms and salts from U.S. government agencies: The U.S. government has demanded that major Internet ...
14
votes
2answers
1k views

What are prudent security precautions to take for business travel by people with access to sensitive info?

The New York Times had a front-page article today: Traveling Light in a Time of Digital Thievery, aka "Electronic Security a Worry in an Age of Digital Espionage". Former director of US national ...
0
votes
1answer
155 views

What is the method used in the New York Times attack? [closed]

In the recent New York Times attacks, how did the attackers gain access to the server? Additionally, is there any evidence that these attacks were launched by China, aside from the proxy?
26
votes
7answers
2k views

Protecting critical state infrastructure from the aftermath of a nuclear blast

Countries rely on computer infrastructure for a huge percentage of communications and military management, as well as utilities like electricity. Unfortunately, nuclear attacks release massive ...
45
votes
3answers
2k views

Mars Curiosity Rover Security

Does the software in the Mars Curiosity Rover have any security features built-in? I can't imagine how someone would hack into it, but if the rover does indeed have some protection against malicious ...