Google & Adobe Hacked !
As we all know by now, the partly successful attempt to hack Google's corporate network was accomplished by exploiting the Zero-Day IE flaw and in the case Adobe the Zero-Day vulnerability in Adobe's Reader was used.
Once the hacker(s) gained control of workstations inside the networks of Google and Adobe they installed a Trojan program called Trojan.Hydraq in order to siphon credentials and other data to further infiltrate the company networks and spread the attack. Adobe isn't saying much other than acknowledging and that no customer / employee data was compromised.
All in all , no one really knows the whole truth. However it is clear these were "highly coordinated and sophisticated" attacks originating from China, as was described by a Google spokesperson.
THIS IS YET ANOTHER REASON NOT TO USE THE IE BROWER -- DOWNLOAD FIREFOX TODAY!
Once the hacker(s) gained control of workstations inside the networks of Google and Adobe they installed a Trojan program called Trojan.Hydraq in order to siphon credentials and other data to further infiltrate the company networks and spread the attack. Adobe isn't saying much other than acknowledging and that no customer / employee data was compromised.
All in all , no one really knows the whole truth. However it is clear these were "highly coordinated and sophisticated" attacks originating from China, as was described by a Google spokesperson.
THIS IS YET ANOTHER REASON NOT TO USE THE IE BROWER -- DOWNLOAD FIREFOX TODAY!
In your post titled “Google & Adobe Hacked,” you write that "the partly successful attempt to hack Google's corporate network was accomplished by exploiting the Zero-Day IE flaw and in the case Adobe the Zero-Day vulnerability in Adobe's Reader was used.”
ReplyDeleteNote that while our investigation is still ongoing, there is no evidence at this time to suggest that a vulnerability in Adobe technology was an attack vector in the attack against Adobe or other companies involved. The McAfee blog post published last Thursday (http://siblog.mcafee.com/cto/operation-“aurora”-hit-google-others/) supports our findings.
Adobe has posted the following information on the topic:
- http://blogs.adobe.com/conversations/2010/01/today_adobe_released_an_update.html
- http://blogs.adobe.com/conversations/2010/01/no_evidence_to_suggest_adobe_t.html
- http://blogs.adobe.com/asset/2010/01/further_details_regarding_atta.html
- http://blogs.adobe.com/conversations/2010/01/idefense_putting_speculations.html
Thanks in advance for updating your post with the latest information!
Wiebke Lips
Senior Manager, Corporate Communications
Adobe Systems Incorporated