Criminals steal hacking tools from security firm FireEye

By Dev Kundaliya for Computing
Wednesday, December 9, 2020

• 2.8k
• 12
• 12
• 12
• 7
• More
• 13
• 12
• 12

US cyber security firm FireEye has fallen victim to a cyber attack, possibly from a state-sponsored threat group, which led to the theft of some of the company's internal hacking tools.

"The incident seems to be quite mysterious and obscure," said Ilia Kolochenko at ImmuniWeb.

"On one side, FireEye readily talks about a 'highly sophisticated state-sponsored adversary', [and] on the other, says that 'no zero-days' or otherwise highly valuable data was stolen. Why would a nation-state APT ever bother to expose their own zero-days and advanced hacking techniques to get a collection of semi-public Red Teaming tools?"

"A wide spectrum of vital questions likewise remains unanswered: when did this incident happen, which systems are impacted, what are the chances that clients' data was compromised? We cannot exclude a probability that this specific incident was merely a smokescreen aimed to distract FireEye from a more important attack targeting clients' data or ultra-confidential private research. More transparency is expected from FireEye to dispel the doubts and bring clarity." Read Full Article