eWhite House Watch - Full Article

In the Clear after 14 Years? Not Quite.

Looks like mistakes are finally catching up to the group of hackers with suspected ties to the NSA, referred to as “Equation Group” by Kaspersky Researchers, as reported in Ars Technica this past week. After almost 14 years of going unnoticed, it looks like Equation Group is finally getting the recognition they deserve. The Ars Technica article exposed information regarding the astounding capabilities of Equation Group, as well several reasons why it seems it’s more likely than not affiliated with the NSA. As seen in previous posts, the NSA is a reoccurring topic when it comes to cyber security.

As reported, the information from the Report  released this past week from the Kaspersky Security Analysis Summit proves why Equation Group is being called “probably the most sophisticated computer attack group in the world.” The Ars Technica article discusses Equation Group’s impressive record, with its most note-worthy achievements including a 2002/2003 hack involving Oracle databased installation CDs and a 2009 attack carried out by infecting CDs sent to specific researchers from a recent scientific conference they had attended. According to the Kaspersky website, Equation Group uses “implants” in order to infect victims and obtain information. According to the Kaspersky report, Equation Group is responsible for more than 500 attacks in 42 countries, although it is estimated by some that the real number is probably much higher considering its impressive ability to prevent themselves from being tracked.

As pointed out in the article, Kaspersky researchers refrained from specifically naming the NSA in their report, although the procedural similarities between Equation Group and operations known to be the NSA are striking. Aside from this, as noted in the Ars Technica article, the time and resources, as well as Equation Group’s advanced capabilities are things “people have come to expect from a spy agency sponsored by the world’s wealthiest nation.” Despite keeping quiet since the report’s release this past week, it should be interesting to see if the NSA comes up with a response or acknowledges the allegations made in the report at all. Either way, Equation Group definitely poses a serious threat to cyber security worldwide, whether tied to the NSA or not. Or, maybe not.  Depending on how you look at it, this program may be exactly the kind of program the NSA should be running, instead of the broad domestic surveillance it’s developed in recent years – here’s why.

Leave a Reply