Security group claims Yahoo hack was not "state-sponsored"

[midian182]

When Yahoo last week confirmed that 500 million of its accounts had been leaked following a hack that took place in 2014, the company said that state-sponsored actors were behind the attack. But according to an independent security firm, a gang of cybercriminals-for-hire was responsible.

Arizona-based InfoArmor, which provides companies with protection against employee identify theft, released an investigative report claiming there is no evidence that a nation-state stole the data.

Last year, Yahoo became one of several companies, including Google, Facebook, and Twitter, to say it would alert users who they suspect have accounts that have come under attack by state-sponsored hackers. It has never revealed how it determines this, or what evidence it has to prove the 2014 hack was orchestrated by a government.

Andrew Komarov, InfoArmor’s chief intelligence officer, concluded that the Yahoo hackers were cybercriminals after reviewing a sample of the leaked data. The firm acquired this from “operative sources” as part of an investigation into a five-person criminal gang located in Eastern Europe known as Group E.

“They have never been hired by anyone to hack Yahoo," said Komarov "They were simply looking for well-known sites that had many users […] According to our information, most of the group's clientele are spammers."

Komarov added that Group E has sold the Yahoo data to at least three different clients. One was a state-sponsored party who had an interest in exclusive database acquisition, and the other two were notable criminal gangs who planned to use it for spam campaigns. "We don't see any reason to say that it's state-sponsored. Their clients are state sponsored, but not the actual hackers," Komarov told the Wall Street Journal.

InfoArmor also believes that Group E was behind the high-profile hacks of LinkedIn, Tumblr, and Dropbox.

Permalink to story.

https://www.techspot.com/news/66509-security-group-claims-yahoo-hack-not-state-sponsored.html

 

[RustyTech]

I say Russia did it! cuz why not? When my pizza is late, it's Russia's fault too!! That's what obama says.

 

[LiveResistance]

I say Russia did it! cuz why not? When my pizza is late, it's Russia's fault too!! That's what obama says.

Why is it that everything is being blamed on Russia? Not that Russia doesn't have hackers, but if a foreign country was going to hack the U.S. my first thought would be China.

 

[RustyTech]

Why is it that everything is being blamed on Russia? Not that Russia doesn't have hackers, but if a foreign country was going to hack the U.S. my first thought would be China.

Darn! I just knew it was the Chinese government that made my pizza late!! ohh hate hate hate!! :s

 

[mbrowne5061]

I say Russia did it! cuz why not? When my pizza is late, it's Russia's fault too!! That's what obama says.

Why is it that everything is being blamed on Russia? Not that Russia doesn't have hackers, but if a foreign country was going to hack the U.S. my first thought would be China.

China's economy is built upon ownership of U.S. debt - and it is floundering because of it. That debt ownership is the only thing still propping their economy up. The U.S. is the last country that they would want to seriously come to blows with, because the debt is in USD. The U.S. can simply say 'we are not going to pay' - while the U.S. takes a credit hit, and the Chinese economy deflates or collapses.

That said, independent 'patriotic' Chinese hackers could still launch attacks with little geopolicital/economic blowback, as long as they have zero ties to the Chinese govt. or the ruling party.