Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [apt]

APT Stands for "Advanced Persistent Threat". It is usually used in reference to a threat posed by a group with the capability and intent to persistently and effectively carry out cyber attacks against specific entities. APT has been used to refer to either the perpetrators, or the actual hack itself (typically when there is no attribution).

2
votes
2answers
241 views

Would an Ubuntu server accessible from the internet be hacked within days?

I created an Ubuntu server on Digital Ocean to deploy my app on. Less then 24 hours later, I log in to the server and see this: 18 packages can be updated. 7 updates are security updates. I install ...
0
votes
2answers
122 views

Is my PC safe after DSA-4371?

I used sudo apt-get update sudo apt-get upgrade before I read https://www.debian.org/security/2019/dsa-4371 There was I change that my PC got exploited/hacked/virused. So I used chkrootkit and ...
0
votes
1answer
103 views

Techniques used by highly sophisticated entities to snoop on VPN or SSH traffic?

It is mentioned in almost every where that very strong agencies, and governments are able to watch the online activity of the people. Aside from techniques like attacking computer networks, and ...
-1
votes
1answer
69 views

International communications after nuclear fallout [closed]

Is there a (nuclear fallout) scenario imaginable where international communications are thrown back to the stone age? Meaning: Satellites are EMP'd out of the sky Transoceanic cables are cut ...
5
votes
1answer
176 views

How Google Detects State Sponsored Attacks

A user on Twitter posted a screenshot in which Google warns him as he may be targeted by state sponsored attackers. What kind of attacks can be detected by Google and how?
0
votes
2answers
146 views

What would 'best practice' look like in protecting critical infrastructure against state actor cyber attack?

I was reading this article from the New York Times, which details the alarming degree to which the IT systems running critical civic infrastructure have allegedly been compromised by Russian cyber ...
1
vote
0answers
34 views

What Does “State Sponsored” Cyber Attacks Mean? [duplicate]

I am hearing on the news this morning that a government of country "A" found tens of thousands of instances of "state sponsored attacks" against it's information systems. What is meant by "state ...
2
votes
1answer
724 views

How can I validate imported keys with GPG?

Recently, I downloaded several public keys with gpg, in order to fix Debian package system after upgrading to Stretch. The commands were: # gpg --recv-keys EF0F382A1A7B6500 # gpg --recv-keys ...
0
votes
1answer
91 views

Analysis of the 2015 Kaspersky hack

I suppose that all of you are aware of the hack of Kaspersky in June of 2015. In Kaspersky's report they say that the intrusion was noticed when one of their engineers tested a new detection tool and ...
1
vote
0answers
68 views

APT Attribution [duplicate]

Given that most characteristics of binaries can be spoofed and seeing from the CIA documents published on Wikileaks that at least that organization is cautious to deploy several methods such that ...
1
vote
0answers
61 views

Will Gooligan or Gooligan-like near-future variants be capable of targeting Marshmallow users?

Android malware called Gooligan has already surpassed it's infection points up to 1M+ in Android market which targets Jellybean & Lollipop. Seems it doesn't work for Mashmallow due to security ...
0
votes
2answers
113 views

Security configurations to protect against 0-day exploits? [closed]

Let's say someone has sensitive information on their computer and can is a potential target of 0-day exploits/attacks. Assuming that they follow conventional security advice (using a firewall, ...
22
votes
2answers
2k views

How do big cloud providers guard against VM escape attacks?

I think it's pretty much unassailable to say that cloud computing as we know it depends on the concept of the robustness of virtual machines. Where one can depend on the security of VMs they allow ...
-5
votes
2answers
640 views

What is the difference between Social Engineering Attack and APT Attack?

Doesn't social engineering attack mean APT attack? They seem similar in my mind, because both of them focuses human, not technology. Shortly, what is the difference between social engineering attack ...
3
votes
3answers
171 views

Is the Linux / Debian software and package-management ecosystem secure?

My basic question is this: When we are using the Linux / Debian apt-get or yum package system, we're placing a lot of faith in that the packages we're downloading and installing are secure. For that ...
5
votes
3answers
776 views

How often do high-end attackers actually use zero-day exploits?

Earlier this week the head of the NSA's Tailored Access Operations unit rather remarkably gave a presentation at the USENIX Enigma security conference. (News coverege here and here; video of the talk ...
0
votes
3answers
177 views

How to successfully prevent advance persistent threats

With the topic of advance persistent threats (APT) getting common nowadays, how do you successfully prevent such an attack in the workplace? Do you have to purchase expensive tools, such as those from ...
1
vote
1answer
120 views

Can OnionDuke malware actually spread to new systems through an image?

I do realize that questions about malware in images has been asked before. It just does not look like they answer the questions in this particular situation. This is about the OnionDuke APT malware ...
4
votes
1answer
209 views

Securing administration network

We would like to secure our administration network from advanced persistant threats and also from rogue administrators. I have already read the best practices from SANS Institute, NSA or other guides. ...
1
vote
1answer
105 views

Are Skype drive-by attacks theoretically possible?

Long story short, I was on my iPhone when this Skype account tried to send me a "picture" but before it could download (I saw what looked like a downloading bar) I left the message and blocked the ...
4
votes
0answers
271 views

What does Lockheed's StarVision do and what are some comparable products on the market? [closed]

I consult for a client who has Lockheed's StarVision as part of their advanced persistent threats tool set. For various political and business reasons, I have not been able to get a close-up look of ...
14
votes
5answers
293 views

How are attacks and APTs attributed?

It's increasingly common to see major attacks on governments and corporations attributed to a specific country or group. Typically we don't know for certain, but it's at least suspected. Given the ...
0
votes
2answers
90 views

Which mechanism did Flame use to avoid being identified?

I got a question that says "What is the major difference in the USB propagation system used by Flame with regard to Stuxnet to prevent being identified?". After Googling for a while, I haven't found ...
2
votes
3answers
665 views

What is the current best practice to secure an executive's laptop?

What is the current best practice to secure an executive's laptop? The exec will be processing highly sensitive documents (high-value bids, merger & acquisition info, technical specs). As such ...
32
votes
4answers
7k views

Malware that can survive BIOS re-flashing

The well-respected security consultant Dragos Ruiu is reporting that he has been infected with mysterious malware that can survive re-installation of the OS and re-flashing of the OS. In other words, ...
5
votes
5answers
575 views

Is there a simple and highly secure office suite?

I am designing a highly restricted workstation build for a secure environment. At the minute this is planned to use Windows 7, but I am considering Linux. The users will on occasion open documents ...
7
votes
1answer
260 views

Single point of failure: can US government requests for passwords be a vector for attack?

In recent news, CNET has reported requests for passwords, hashing and/or encryption algorithms and salts from U.S. government agencies: The U.S. government has demanded that major Internet ...
6
votes
2answers
1k views

Detecting Pass-the-Hash

I was wondering what you guys are doing to detect attacks like Pass-The-Hash within your network. I've read about Breachbox http://www.darkreading.com/monitoring/researcher-to-open-source-tools-for-...
0
votes
1answer
157 views

What is the method used in the New York Times attack? [closed]

In the recent New York Times attacks, how did the attackers gain access to the server? Additionally, is there any evidence that these attacks were launched by China, aside from the proxy?
28
votes
7answers
2k views

Protecting critical state infrastructure from the aftermath of a nuclear blast

Countries rely on computer infrastructure for a huge percentage of communications and military management, as well as utilities like electricity. Unfortunately, nuclear attacks release massive ...
44
votes
3answers
3k views

Mars Curiosity Rover Security

Does the software in the Mars Curiosity Rover have any security features built-in? I can't imagine how someone would hack into it, but if the rover does indeed have some protection against malicious ...
2
votes
2answers
500 views

What are the most sophisticated techniques used by intruders you have found in the wild?

I am beginning to get involved in incidents, some of them are APT (Advanced Persistent Threat). Despite the complexity available in the 'bibliography' and in the conferences or security e-zine, the ...
17
votes
2answers
1k views

What are prudent security precautions to take for business travel by people with access to sensitive info?

The New York Times had a front-page article today: Traveling Light in a Time of Digital Thievery, aka "Electronic Security a Worry in an Age of Digital Espionage". Former director of US national ...
3
votes
7answers
1k views

Which forensic techniques should I use to identify intrusion or monitoring of my computer or cellphone

If I suspect my computer or cellphone is being monitored by an unknown attacker, what tools or techniques could I use to detect or identify such monitoring?
9
votes
2answers
1k views

Does the Mebromi BIOS flashing rootkit mean APTs for personal computers are here?

With the recent discovery of the Mebromi BIOS firmware virus/MBR rootkit in the wild are we now actually in the age of Advanced Persistent Threats (APT) for personal computers and does that imply ...
107
votes
7answers
26k views

What would one need to do in order to hijack a satellite?

I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites. What would be required to hack a satellite (in general terms, any hack ...
11
votes
5answers
485 views

Government / State cyberwarfare organizations

I am working on some research regarding advanced persistent threats. Within this effort, discussion of cyber-warfare started. Looking further into the subject, I have found a plethora of links ...