Уровень 0 · материалов: 3
В кластер входят документы о краже данных и внедрении уязвимостей в интересах иностранных государств, но не входят документы об обычном криминальном киберпреступном ПО без государственного участия.
Общие признаки: государственный шпионаж, уязвимости на аппаратном уровне, кража конфиденциальных данных, угрозы национальной и корпоративной безопасности
Группа выше: Шпионское ПО, кибероружие и спецслужбы
Смысл: The main idea is that hardware-level vulnerabilities introduced by foreign intelligence services can lead to massive corporate security breaches and severe financial losses for the involved companies, while fueling geopolitical trade tensions.
Supermicro shares plummeted after reports revealed that Chinese intelligence covertly installed spy chips in their servers to infiltrate major US companies.
Смысл: The main idea is that highly sensitive data regarding the F-35 Lightning II fighter jet was stolen from the Pentagon, with suspected involvement from China, highlighting the risks of cyber-espionage in military projects.
Hackers stole terabytes of data from the Pentagon's $300 billion Joint Strike Fighter project, with suspicions pointing toward China.
Смысл: The main idea is that high-level state espionage can occur at the hardware firmware level, making it nearly impossible to remove through traditional software means, while also questioning the PR motives behind the timing of cybersecurity research releases.
Kaspersky Lab revealed a sophisticated NSA-linked espionage tool that hides in HDD firmware, surviving OS reinstalls and targeting strategic global entities.