Security firm Kaspersky hacked

DA-LION-619 said:
+1 also Eset is the lightest on system resources I've seen so far
Click to expand...
Sorry missed this before. Yeah ESET is remarkable in this regard. It's the most discrete antivirus I've ever used, once update notifications are turned off. You can buy it very cheap on G2A - like $6 or $7 a year.
 
crackersa said:
Go back and read his posts. He said that if it is hacked he would keep that in mind and I just pointed out that they all probably been hacked and then I was told to write my own. Is this not a forum of open communication?
Click to expand...


People abuse this forum and turn it into a trollfest
 
Yah well, brand loyalty is big on MyB.
However to quote the article, the bad news,
That is the good in the bad, thanks to attacks like those the system is only improved.
Click to expand...
Maybe I should elaborate a bit more.
My intention was not to run one specific company down but to point out that an anti virus on its own will not ensure that you are safe.
If you keep educating yourself on internet security you will reduce the chances of being hacked but not eliminate them all together.

I agree that there is good in the bad but the bad news is they were:
1. Hacked
2. The hackers managed to erase their tracks as soon as someone in kaspersky detected that they had been hacked.
This means that we can only assume that the hackers didn’t get any valuable information.

The good news is they have found a back door into their system & can now close it.

A few years back I had a dormant email account hacked and password changed.
This just alerted me to change my password and improve my security on my active email account.

I used to think that Linux was unhackable until we got alerted about Heart bleed.

Look at the high end security team JP Morgan have got in place and they were not only hacked but it took them three years to find out that they had intruders in their system.
Yah well, brand loyalty is big on MyB.
However to quote the article, the bad news,
That is the good in the bad, thanks to attacks like those the system is only improved.
Click to expand...
Maybe I should elaborate a bit more.
My intention was not to run one specific company down but to point out that an anti virus on its own will not ensure that you are safe.
If you keep educating yourself on internet security you will reduce the chances of being hacked but not eliminate them all together.

I agree that there is good in the bad but the bad news is they were:
1. Hacked
2. The hackers managed to erase their tracks as soon as someone in kaspersky detected that they had been hacked.
This means that we can only assume that the hackers didn’t get any valuable information.

The good news is they have found a back door into their system & can now close it.

A few years back I had a dormant email account hacked and password changed.
This just alerted me to change my password and improve my security on my active email account.

I used to think that Linux was unhackable until we got alerted about Heart bleed.

Look at the high end security team JP Morgan have got in place and they were not only hacked but it took them three years to find out that they had intruders in their system.

[URL="http://www.mynews13.com/content/news/cfnews13/news/article.html/content/news/articles/cfn/2014/10/3/millions_of_jp_morga.html"]http://www.mynews13.com/content/news/cfnews13/news/article.html/content/news/articles/cfn/2014/10/3/millions_of_jp_morga.html
 
Last edited:
Hermes14 said:
Maybe I should elaborate a bit more.
My intention was not to run one specific company down but to point out that an anti virus on its own will not ensure that you are safe.
If you keep educating yourself on internet security you will reduce the chances of being hacked but not eliminate them all together.

I agree that there is good in the bad but the bad news is they were:
1. Hacked
2. The hackers managed to erase their tracks as soon as someone in kaspersky detected that they had been hacked.
This means that we can only assume that the hackers didn’t get any valuable information.

The good news is they have found a back door into their system & can now close it.

A few years back I had a dormant email account hacked and password changed.
This just alerted me to change my password and improve my security on my active email account.

I used to think that Linux was unhackable until we got alerted about Heart bleed.

Look at the high end security team JP Morgan have got in place and they were not only hacked but it took them three years to find out that they had intruders in their system.
Click to expand...

Nothing wrong with your intention, it is good to update any and all communities on possible and probable exploits/threats. What is important is to note that Kaspersky was challenged by a zero-day exploit and in accordance with their own blog they didn’t experience a compromise within their core systems. In essence this was an attack (or hack attempt) on Kasperky’s core system (or technologies).

Then to take zero-day attacks in depth, to quote Wiki,

https://en.wikipedia.org/wiki/Zero-day_(computing)

A zero-day (also known as zero-hour or 0-day) is a computer threat that exposes undisclosed or unpatched computer application vulnerabilities. Zero-day attacks can be considered a great threat because they take advantage of computer security holes for which no solution is currently available.

0-day exploits are released before, or on the same day the vulnerability — and, sometimes, the vendor patch — are released to the public. The term derives from the number of days between the public advisory and the release of the exploit.[1] This definition leaves something to be desired as the name itself is an indication of the vendor patch being available, i.e. the vulnerability affected unpatched systems for zero days.
Click to expand...

I have in the past posted a detailed post on MyB covering vulnerability windows that was in concern with CryptoLocker (and other variants). There are no protection against zero-day exploits, other than the AV vendors taking up a proactive approach. Many people which believe they never had a virus/malware or any other malicious program could had experienced a zero-day attack without ever knowing about it, that same program can still be active today.

Organisations like AV-Comparatives, Virus Bulletin etc. run zero-day attacks against unexploited AV engines, then allow the vendor room to patch the window. You get cheaters which enables secondary AV engines which already patched the window to gain higher scores, both AV-C and VB has removed results gained by these vendors.

Many AV entities do share engines, especially within perimeter security appliances.
 
Bitdefender is great too, don't think it's as lightweight as ESET was, but got a years free full subscription. So no harm in trying it out. :)
 
genetic said:
Bitdefender is great too, don't think it's as lightweight as ESET was, but got a years free full subscription. So no harm in trying it out. :)
Click to expand...
Bitdefender is the only antivirus I've ever had that I uninstalled with the majority of my license still remaining. It prevented network sharing from working properly (weeks of customer support couldn't solve the issue, although changing to AVG sorted it out instantly) and in general was the opposite of ESET - a constant nuisance with all the pestering.

That was years ago. Could have changed by now. I'm just put off by the brand after that.
 
Claiming good news when your network has been infiltrated :confused:

They have no idea how long their network had been compromised.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X