TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Chasing Ghostnet, a espionage network w/ 1295 infected PCs

6 点作者 schtono大约 16 年前

3 条评论

andr大约 16 年前
The actual PDF: <a href="http://dl.getdropbox.com/u/10731/15987355.pdf" rel="nofollow">http://dl.getdropbox.com/u/10731/15987355.pdf</a>
评论 #538012 未加载
nikblack大约 16 年前
WAY over-rated story. The network is built using a script kiddy tool called Gh0st RAT, which relies solely on social engineering to propagate. There are no new exploits here, or nothing as sophisticated as confiker especially since Gh0st RAT is a simple client/server model that is very easy to block (infact, most firewalls should already be blocking it).<p>The security company that wrote that report probably charged hundreds of thousands of dollars for information that any competent network admin could have found online or would already know if they kept up to date with the 'latest' (ie. 10 year old) threats.<p>It just happens that one of these networks hits a high-valued target, and then propagates. Note that most of the victims are incredibly unsophisticated and from poorer countries or organizations without a clue.<p>The lesson here should be about training computer users and having competent administration and support of IT infrastructure, rather than a scare campaign about Chinese government hacking. ('oh the host server is a Chinese IP, it must be the government! (300M net users in China.. durgh)).
ckinnan大约 16 年前
60 minutes just ran a story on Ghostnet. It is a terrible development-- these networks undermine online trust and e-commerce everywhere.