Delete please

[vitalker]

What do you think about it?

https://www.bleepingcomputer.com/new...alware-loader/

[papagirafe]

Always possible as any developer might insert malware inadvertently in their installation packages but unlikely IMHO. The same thing has been said about chips manufactured in China that are suspected to include dormant instructions for espionage.

[vitalker]

Originally Posted by papagirafe

The same thing has been said about chips manufactured in China that are suspected to include dormant instructions for espionage.

Why do you think it can't be true? They knew who is the client.

[papagirafe]

Originally Posted by vitalker

Why do you think it can't be true? They knew who is the client.

My initial feeling was only based on the the fact that I've heard so many similar stories in my carrer from dubious websites. But now that I have checked the credential of bleepingcomputer I take it much more seriously. This claim being likely true, I doubt a home/home office setup would be of any interest to the Cicada group and my understanding is that it takes a combination with a vulnerability in a microsoft product used almost only in big entreprises. Still, makes you wonder how many of these exists in other apps...

[vitalker]

Originally Posted by papagirafe

My initial feeling was only based on the the fact that I've heard so many similar stories in my carrer from dubious websites. But now that I have checked the credential of bleepingcomputer I take it much more seriously. This claim being likely true, I doubt a home/home office setup would be of any interest to the Cicada group and my understanding is that it takes a combination with a vulnerability in a microsoft product used almost only in big entreprises. Still, makes you wonder how many of these exists in other apps...

Well they also can use backdoors made for intelligence agencies (not Chinese of course).

[cyrano]

There is evidence that some initial access to some of the breached networks was through a Microsoft Exchange server...

Once you have access to a server, or a network, the rest is simple and there are numerous options available.

The reason they used VLC is that it's popular and they probably noticed it was present on most targets.

[vitalker]

Originally Posted by cyrano

Once you have access to a server, or a network, the rest is simple and there are numerous options available.

The reason they used VLC is that it's popular and they probably noticed it was present on most targets.

Yeah, I understand that. So fake news?

[cyrano]

Not fake news.

It just amazes me a bit that the media's publicity department didn't cut it. Usually that's what happens.