ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode
Schneier on Securitypublished ()ingested

Was the Triton Malware Attack Russian in Origin?

mediumMalwareimportance 30
Read the original
Tagsmalware
Full article91 words · extracted from schneier.com · click to collapse

HomeBlog

The conventional story is that Iran targeted Saudi Arabia with Triton in 2017. New research from FireEye indicates that it might have been Russia.

I don’t know. FireEye likes to attribute all sorts of things to Russia, but the evidence here looks pretty good.

Tags: attribution, control, Iran, malware, Russia, Saudi Arabia

Posted on October 31, 2018 at 12:44 PM • 13 Comments

Comments

Atom Feed Subscribe to comments on this entry

Sidebar photo of Bruce Schneier by Joe MacInnis.

Powered by WordPress Hosted by Pressable

Text extracted automatically; images, tables and formatting may be missing. Original: https://www.schneier.com/blog/archives/2018/10/was_the_triton_.html