Hackers Plundered Israeli Defense Firms That Built 'Iron Dome' Missile Defense 184
An anonymous reader writes: Brian Krebs reports on information from Columbia, Md.-based threat intelligence firm Cyber Engineering Services Inc. that attackers thought to be operating out of China hacked into the corporate networks of three top Israeli defense technology companies. The attackers were seeking technical documents related to Iron Dome, Israel's air defense system. "IAI was initially breached on April 16, 2012 by a series of specially crafted email phishing attacks. ... Once inside the IAI’s network, [the attackers] spent the next four months in 2012 using their access to install various tools and trojan horse programs on systems throughout company’s network and expanding their access to sensitive files, CyberESI said. The actors compromised privileged credentials, dumped password hashes, and gathered system, file, and network information for several systems. The actors also successfully used tools to dump Active Directory data from domain controllers on at least two different domains on the IAI’s network. All told, CyberESI was able to identify and acquire more than 700 files — totaling 762 MB total size — that were exfiltrated from IAI’s network during the compromise. The security firm said most of the data acquired was intellectual property and likely represented only a small portion of the entire data loss by IAI." Most of the stolen material pertained to Arrow III missiles, UAVs, and ballistic rockets.
And it'll keep happening, again and again... (Score:4, Insightful)
I can tell you one thing, if such a system were implemented there'd probably be an uptick in efficiency as now it'd be a lot harder to screw around at work. Sure, a lot of people would be really pissed that they can't do non-work tasks at work without using a system seeing such monitoring too, but given that salaries in the defense sector are generally pretty good, that's a tradeoff that one could probably stomach.
Re:And it'll keep happening, again and again... (Score:2, Insightful)
I'd bet most companies in the defense sector don't even have the level of security of a typical gaming company making the AAA titles. By the way, the secure systems can't be allowed to access even to the rest of the internal network of the company for such a separation be effective.
Meh. (Score:5, Insightful)
China is in a state of de facto war with every military R&D project in the world. Any defense contractor not locked down six ways from Sunday should be punished (or they should get a bonus for best practices.)
Gee, isn't Iron Dome supposed to be worthless? (Score:2, Insightful)
Apparently the Chinese don't think so. Compared to the American liberal arts community of experts on missile defense, they must be sadly misinformed.
Re:Tag, you're it! (Score:5, Insightful)
Why, did China start to settle on their land, too?
Re:Tag, you're it! (Score:3, Insightful)
Re:Tag, you're it! (Score:3, Insightful)
nice trolling, its a prison, not a concentration camp!
Microsoft Iron Dome? (Score:1, Insightful)
Just who in their right minds keep 'secret' files on a Windows computer?
Re:Tag, you're it! (Score:4, Insightful)
No, just Tibet.
Re:Microsoft Iron Dome? (Score:3, Insightful)
What does 'specially crafted email phishing' attacks have to do with Windows?
Convincing someone to alter settings on their machine, download a file, or process some request has little to do with the OS in question.