McAfee Releases Report On Hacking Project
MELISSA BLOCK, host: From NPR News, this is ALL THINGS CONSIDERED. I'm Melissa Block.
MICHELE NORRIS, host: And I'm Michele Norris. The cyber security firm McAfee has released a report about a massive cyber-attack. Hackers hit more than 70 corporations, nonprofits, government agencies, and human rights groups in 14 different countries. NPR's Laura Sydell reports on what McAfee is calling Operation Shady Rat.
LAURA SYDELL: The report from McAfee says their security team gained access to a server that was used as part of a staging ground for the attack. McAfee's Dr. Phyllis Schneck says among those targeted were major multi-national corporations and defense contractors.
Dr. PHYLLIS SCHNECK: This has been corporate espionage on steroids.
SYDELL: Corporate espionage on steroids - that's quite a term.
SCHNECK: And the adversary's been very quiet and exceedingly meticulous.
SYDELL: Schneck says their research shows attacks going back to 2005. The hacker gained access by sending a very carefully crafted email to people inside targeted companies.
SCHNECK: It doesn't typically have the spelling errors that we're used to seeing in the fraud emails. It is designed to have a header that looks like it came from your organization.
SYDELL: When the recipient clicks on a link the hacker gets inside the organization's computer, stays there and watches. This kind of stealth attack can steal hoards of corporate secrets that could be used to take down entire industries. The targets also included human rights organizations, local governments, the United Nations, the Associated Press offices in Taiwan and the International Olympic Committee, which was most heavily targeted during the Olympics in Beijing. This, along with the targeted human rights groups, is leading many security and foreign policy experts to believe that the culprit is China. Laura Sydell, NPR News.
NPR transcripts are created on a rush deadline by Verb8tm, Inc., an NPR contractor, and produced using a proprietary transcription process developed with NPR. This text may not be in its final form and may be updated or revised in the future. Accuracy and availability may vary. The authoritative record of NPR’s programming is the audio record.