Criminals steal hacking tools from security firm FireEye
Wednesday, December 9, 2020
US cyber security firm FireEye has fallen victim to a cyber attack, possibly from a state-sponsored threat group, which led to the theft of some of the company's internal hacking tools.
"The incident seems to be quite mysterious and obscure," said Ilia Kolochenko at ImmuniWeb.
"On one side, FireEye readily talks about a 'highly sophisticated state-sponsored adversary', [and] on the other, says that 'no zero-days' or otherwise highly valuable data was stolen. Why would a nation-state APT ever bother to expose their own zero-days and advanced hacking techniques to get a collection of semi-public Red Teaming tools?"
"A wide spectrum of vital questions likewise remains unanswered: when did this incident happen, which systems are impacted, what are the chances that clients' data was compromised? We cannot exclude a probability that this specific incident was merely a smokescreen aimed to distract FireEye from a more important attack targeting clients' data or ultra-confidential private research. More transparency is expected from FireEye to dispel the doubts and bring clarity." Read Full Article
ITWeb: Top US cyber security firm FireEye hit by 'state-sponsored adversary'
Information Security Buzz: Expert On News: Hackers Appear To Begin Selling Data They Stole From Shirbit Insurance Firm