The big issue here is that the particular malware was not known by Microsoft, so it was a zero-day bug on the mighty Microsoft. When the website was opened with an Internet Explorer browser, then the attacker would be able to exploit a fully patched internet explorer. When the victim clicked on the link inside the email, it would take them to a fake website with malware on it. The emails were so well-crafted and personalized that even an experienced security expert would find it hard to detect. They would spoof the Sender of the email to make it look like it was sent from a legitimate user, and finally trick them to click on the link inside the email. The attackers would profile an employee of the targeted company, elicit the information they need from the target, and then craft a perfect spear-phishing e-mail.
After finding that, McAfee security researchers were the first ones to call the attack Operation Aurora, because of the malware being inside that folder, named Aurora. McAfee got a sample of the malware to reverse engineer it and managed to found that when a cybercriminal executed the attack, it was running out of a folder called Aurora. With the news of the attack, and after some hours of the announcement, some of the companies affected like Adobe, admitted that they’d been attacked too, along with numerous companies like Microsoft, Yahoo, Juniper Networks.Īfter the news broke, victims’ companies, law enforcement, and security companies all began an extended investigation. They said that it was the most sophisticated cyber-attack they endured since their creation and that the virus used was not detected by any antivirus. On January 12th, 2010, Google made a blog post named “A new approach to China” describing the attack that affected at least 20 large companies from June to December of 2009.
If you want to express your idea in an article contact us here for a quote:
It’s been almost 11 years since Google publicly disclosed in a blog, that they’d been the victim of a sophisticated cyber-attack that targeted over 20 other companies and organizations, including Google, Adobe, Oracle, and Microsoft, etc.Īs a result of the attack, Google stated that some of its intellectual property had been stolen from what seemed Chinese factors and that it was reviewing its business in China causing huge reactions in the tech world from the global leaders.Īre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and worth sharing ? It’s so popular that many people around the world believe that Google is actually the Internet. Google is the most popular website on the Internet with over 90 billion visits in 2021 already.
0 kommentar(er)
