Skip to main content

Former NSA hacker reversed Kaspersky Lab antivirus to compose signatures capable of detecting classi

  • January 2, 2018
  • 1 reply
  • 169 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
January 2, 2018  By Pierluigi Paganini
 

Former NSA hacker, demonstrated how to subvert the Kaspersky Lab antivirus and turn it into a powerful search tool for classified documents.

 
The Kaspersky case demonstrated that security software can be exploited by intelligence agencies as a powerful spy tool.
 
Patrick Wardle, chief research officer at Digita Security and former NSA hacker, demonstrated it by subverting the Kaspersky Lab antivirus and turning it into a powerful search tool for classified documents.
 
“In the battle against malicious code, antivirus products are a staple,” Patrick Wardle told the New York Times. “Ironically, though, these products share many characteristics with the advanced cyberespionage collection implants they seek to detect.”
 
“I wanted to know if this was a feasible attack mechanism,” Mr. Wardle added. “I didn’t want to get into the complex accusations. But from a technical point of view, if an antivirus maker wanted to, was coerced to, or was hacked or somehow subverted, could it create a signature to flag classified documents?”
 
Full Article.

1 reply

This approach is a concern as indicated by this thread. "Quote" if an antivirus maker wanted to, was coerced to, or was hacked or somehow subverted, could it create a signature to flag classified documents?” If this was the case governments are in big trouble.

Reply