> making fun of the attribution to “sophisticated” and “with resources of a nation-state.” Oops.
This annoys me.
1) I'm equally breached whether the hacker used a sophisticated attack or not.
2) A "nation-state" attacker is more than willing to use "unsophisticated" attacks to accomplish their goals.
In fact, a "nation-state" attacker is probably less likely to use "sophisticated" attacks as they will want to save those for the cases where they really need to get through security.
That’s a really narrow view. Solar winds Orion is a widely used, popular tool for managing switches and routers and backing up network device configuration. It’s been compromised for months.
This could be a stuxnet type attack looking for a particular facility, or something far worse at a time when the US is most vulnerable.
This annoys me.
1) I'm equally breached whether the hacker used a sophisticated attack or not.
2) A "nation-state" attacker is more than willing to use "unsophisticated" attacks to accomplish their goals.
In fact, a "nation-state" attacker is probably less likely to use "sophisticated" attacks as they will want to save those for the cases where they really need to get through security.