Russian hackers’ ‘Trojan Horse’ malware inside U.S. critical infrastructure since 2011

The Washington Times ^ | Friday, November 7, 2014 | Douglas Ernst

[HLPhat]

“The Microsoft Windows OLE Package Manager Remote Code Execution Vulnerability (CVE-2014-4114) allows attackers to embed Object Linking and Embedding (OLE) files from external locations. The vulnerability can be exploited to download and install malware on to the target’s computer. The vulnerability appears to have been used by a cyberespionage group known as Sandworm”
http://www.symantec.com/connect/blogs/sandworm-windows-zero-day-vulnerability-being-actively-exploited-targeted-attacks

2011?

How long has Microshaft OLE been infecting systems?

[onedoug]

When the internet goes down let the nukes fly. Just make sure to aim a few at the islamic states too.

[ansel12]

Do you always defend attacks on us?

[HLPhat]

If Comrade Snowden was smart enough to steal multiple terabytes of data for the benefit of his Russian/Soviet hosts - then why was he so stupid that he couldn’t manage to save copies of the whistleblower emails he says he sent to his superiors, BUT CAN’T PRODUCE?

[hanamizu]

I seem to recall a huge pipeline explosion in Russia (before the fall of the USSR) that was caused by code secreted in software that we “let” the Soviets steal.

[GOPJ]

Thanks for the ping.

[Moltke]

Throughout my physics studies I relied on the Landau-Lifshitz theoretical physics textbooks as much as on, e.g., the more experimental-oriented Feynman Lectures. Great texts from both sides of the Iron Curtain on basic physics.