ICT Security-Sécurité PC et Internet

Hackers going by the name Shadow Brokers said on Monday they will auction stolen surveillance tools they say were used by a cyber group linked to the U.S. National Security Agency.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/?tag=NSA

DARPA postpones release of official solicitation.

Officials at the Defense Advanced Research Projects Agency have decided to postpone briefings and the release of solicitation documents for Plan X, a widely-anticipated funding initiative that will lay the foundation for the government’s push into offensive computer warfare operations.

“Due to an unanticipated and overwhelming response from industry and academia, DARPA has rescheduled the Plan X Proposers’ Day Workshop,” agency officials announced Sept. 5.

Two sessions with researchers and defense contractors—one classified and one non-classified—originally were slated for Sept. 27, but have now been moved to Oct. 15 and 16. “The second day will be a repeat of the first day to accommodate the remaining attendees,” the notice said. The request for proposals, originally scheduled for release at the end of this month, is expected to be published in October instead.

The surge of interest highlights a community emerging around offensive security technology. Plan X is a Pentagon initiative to develop computer architecture that monitors damage in “dynamic, contested, and hostile network environments,” adaptively defends against attacks, and performs “weapon deployment,” contracting documents indicate. The program is not funding malware or tools that hunt down vulnerabilities, but the resulting computer architecture will likely serve as the framework for their deployment.

Read more:

http://www.nextgov.com/defense/2012/09/pentagon-receives-overwhelming-response-plan-x-cyber-offensive/57961/

L’éditeur de sécurité Kaspersky vient de publier ses premières conclusions concernant un malware d’un nouveau genre, décrit comme le plus puissant et le plus complexe jamais identifié.

Nous savons Kaspersky peu avare de superlatifs lorsqu’il s’agit de décrire un malware. Mais la découverte de Flame dépasse tous les commentaires que l’on a pu entendre, y compris pour des virus comme Stuxnet ou Duqu. A l’instar de ses deux prédécesseurs, Flame n’est pas un malware comme les autres et ce pour différentes raisons.

Premièrement, il s’agit d’un virus « géopolitique », à savoir qu’il a infiltré massivement des ordinateurs situés dans une zone géographique précise : le moyen-orient avec l’Iran comme destination privilégiée. Ensuite, sa complexité semble défier tout ce qui a été vu jusqu’à présent. D’après l’éditeur russe, il est en service depuis au moins de deux ans, certains indices montrent qu’il pourrait exister depuis cinq ans et sa complexité fait qu’il va falloir des années pour le déchiffrer intégralement.

Image credit:
http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers

Lire plus :

http://www.linformaticien.com/actualites/id/24986/flame-l-outil-de-cyberespionnage-le-plus-puissant-jamais-identifie.aspx?utm_source=twitterfeed&utm_medium=twitter

Flame is a sophisticated attack toolkit, which is a lot more complex than Duqu. It is a backdoor, a Trojan, and it has worm-like features, allowing it to replicate in a local network and on removable media if it is commanded so by its master.

Read more, very interesting:

http://www.securelist.com/en/blog/208193522/The_Flame_Questions_and_Answers

An anonymous group claims to have stolen hacking tools that might belong to the NSA and is auctioning them off to the highest bidder.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/securite-pc-et-internet/

The attackers behind the complex Flame cyberespionage toolkit, believed to be a state-sponsored operation, used an extensive list of fake id...

Read more, interesting to know...

http://www.wired.com/threatlevel/2012/06/flame-command-and-control/?utm_source=twitterfeed&utm_medium=twitter

With the revelation that the US and Israel co-operated at the highest level on Stuxnet, the rules of international aggression are changing.

Read more:

http://www.zdnet.co.uk/news/security-threats/2012/06/01/stuxnet-has-put-us-all-on-the-front-line-of-warfare-20-40155333/?s_cid=458

Symantec helps consumers and organizations secure and manage their information-driven world.

W32.Flamer is possibly the only Windows based threat we have encountered which uses Bluetooth. It is yet another indicator that W32.Flamer is not only exceptional, but that it is a comprehensive information gathering and espionage tool. The CrySyS laboratory has previously documented the technical details of Bluetooth in W32.Flamer.

But, what does this actually mean for potential victims targeted by Flamer? What can an attacker accomplish using Bluetooth?

Read more to find out:

http://www.symantec.com/connect/blogs/flamer-recipe-bluetoothache