[TriLUG] Kapersky: Bad News Bears

[Roger W. Broseus via TriLUG]

Reports in today's news confirms that Kapersky Labs' anti-virus software has 
enabled Russian spying. Excerpts:

    "Russian government hackers lifted details of U.S. cyber capabilities from
    a National Security Agency employee who was running Russian antivirus
    software on his computer, according to several individuals familiar with
    the matter.

    "The employee had taken classified material home to work on it on his
    computer, and his use of Kaspersky Lab antivirus software enabled Russian
    hackers to see his files, the individuals said. The case, which dates to
    2015 and has not been made public, remains under investigation by federal
    prosecutors.

    . . . "The theft of the material enabled the Russian government to more
    easily detect and evade U.S. government cyberespionage operations, thwart
    defensive measures and track U.S. activities . . ..

    "A Russian law requires telecommunications companies in the country to
    provide access to their networks. Kaspersky’s servers are located in
    Moscow, which means that customer data flowing through its servers passes
    through those same telecom providers’ networks . . ..

    "To keep the detection capability up to date, the software routinely
    connects to the antivirus company. That connection is a double-edged sword."

Full story:
Russian government hackers used antivirus software to steal U.S. cyber 
capabilities

Short URL: http://tinyurl.com/ycrm9gpx

Full URL:
https://www.washingtonpost.com/world/national-security/russian-government-hackers-exploited-antivirus-software-to-steal-us-cyber-capabilities/2017/10/05/a01bf546-a9fc-11e7-92d1-58c702d2d975_story.html

(This note is being cross-posted to a couple of LUG mailing lists to enable 
viewing be readers in disparate locations.)

-- 
--
Roger W. Broseus - Linux User
     Email:RogerB at bronord.com
     Web Site:www.bronord.com