[iwar] Japan implicated in Kiwi hacking probe

From: Fred Cohen (fc@all.net)
Date: 2001-08-14 05:24:39


Return-Path: <sentto-279987-1607-997791880-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Tue, 14 Aug 2001 05:26:08 -0700 (PDT)
Received: (qmail 22981 invoked by uid 510); 14 Aug 2001 12:25:02 -0000
Received: from n8.groups.yahoo.com (216.115.96.58) by 204.181.12.215 with SMTP; 14 Aug 2001 12:25:02 -0000
X-eGroups-Return: sentto-279987-1607-997791880-fc=all.net@returns.onelist.com
Received: from [10.1.4.55] by fk.egroups.com with NNFMP; 14 Aug 2001 12:24:40 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_3_1); 14 Aug 2001 12:24:39 -0000
Received: (qmail 8414 invoked from network); 14 Aug 2001 12:24:39 -0000
Received: from unknown (10.1.10.26) by l9.egroups.com with QMQP; 14 Aug 2001 12:24:39 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta1 with SMTP; 14 Aug 2001 12:24:39 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id FAA25769 for iwar@onelist.com; Tue, 14 Aug 2001 05:24:39 -0700
Message-Id: <200108141224.FAA25769@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Tue, 14 Aug 2001 05:24:39 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] Japan implicated in Kiwi hacking probe
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Japan implicated in Kiwi hacking probe 
By John Leyden, The Register, 8/13/2001
http://www.theregister.co.uk/content/55/20985.html

A Japanese government agency has been implicated in attempts to hack
into a medical research institute in New Zealand. 

Kiwi news service NZOOM cites security consultant Philip Whitmore from
PricewaterhouseCoopers to support its allegations of state sponsored
espionage against New Zealand's private sector. 

Whitmore was reportedly called in to advise an unnamed Kiwi medical
institute which was being probed in hacking attacks believed to have
originated from South East Asia. 

According to NZOOM, Whitmore attended an incident where a server
containing sensitive information inside a Kiwi medical research
institute was targeted in an unsuccessful attack which "originated from
a Japanese government agency". 

Quite what form this attack took isn't explained in the article, which
goes off on a tangent about the "US-China" cyberwar. 

The possibility that the "attack" may have been generated by a zombie
agent on a Japanese government system or a server compromised by the
Code Red worm isn't explored in the article.  Anyone who has a firewall
knows that probes and scans go on all the time, so leaping from a scan
to "Japanese govt behind spy hacks" is quiet a leap. 

Last week, a Centre for Critical Infrastructure Protection was set up in
New Zealand and we're left wondering if the story is an attempt to give
a sexy news hook.  In the absence of more substantive evidence this
would seem to be the case.

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:39 PDT