Cybersecurity @sh.itjust.works Kid @sh.itjust.works 5mo ago

Ukraine says hackers abuse SyncThing tool to steal data

www.bleepingcomputer.com Ukraine says hackers abuse SyncThing tool to steal data

The Computer Emergency Response Team of Ukraine (CERT-UA) reports about a new campaign dubbed "SickSync," launched by the UAC-0020 (Vermin) hacking group in attacks on the Ukrainian defense forces.

Technology @lemmy.world Queue @lemmy.blahaj.zone 5mo ago

www.bleepingcomputer.com /news/security/ukraine-says-hackers-abuse-syncthing-tool-to-steal-data/

130 27

16 comments

Got worried about a synching vuln, but no, they are just using it as a file transfer agent for their own malware.
- Threat actor using software as intended.
  
  Next article, "hackers abuse bash to list directory contents and write the output to a file."
Use... Not abuse.

I just lost a bunch of respect for bleeping computer
- Oh no you lost respect because someone use the wrong word. My day is ruined that you lose respect. How will the world continue because [email protected] haves lost respect. Also they abused it because in the Eula you agree not to use their software in this manner. So they improperly used this software to exfiltrate data. I haven't seen you write your own articles either. Sorry let me not abuse you too much.
  
  Instance Rules
  
  Be respectful. Everyone should feel welcome here.
  
  https://github.com/syncthing/syncthing/blob/main/LICENSE
  
  The license does not restrict use of a file transfer protocol for file transfer. In fact it's the Mozilla public license. It's very permissive
  
  Got to admit, your comment matches your username, kudos

16 comments