Welcome to WebmasterWorld Guest from 188.8.131.52
Forum Moderators: bill
Report Details Hacks Targeting Google, Others [wired.com]
Now a leading computer forensic firm is providing the closest look so far at the nature of the attacks, and attackers, that struck Google and others. The report never mentions Google by name, or any other companies, but focuses on information gathered from hundreds of forensic investigations the firm has conducted that are identical to what we know about the Google hack.
What the information indicates is that the attack that hit Google is identical to publicly undisclosed attacks that have quietly plagued thousands of other U.S. companies and government agencies since 2002 and are rapidly growing. They represent a sea change from the kinds of attacks that have commonly hit networks and made headlines.
"The scope of this is much larger than anybody has every conveyed," says Kevin Mandia, CEO and president of Virginia-based computer security and forensic firm Mandiant. "There [are] not 50 companies compromised. There are thousands of companies compromised. Actively, right now."
Called Advanced Persistent Threats (APT), the attacks are distinctive in the kinds of data the attackers target, and they are rarely detected by antivirus and intrusion programs. What’s more, the intrusions grab a foothold into a company’s network, sometimes for years, even after a company has discovered them and taken corrective measures.[wired.com...]
>How could this type of attack effect the traffic of a us based news site?
This isn't a mug-the-peasants-for-their-straw-hats operation. They're going after companies that handle financial transactions on the web, or that have valuable information (databases or software) that could be stolen.
Blocking Chinese IPs won't do anything to prevent an attack like this.