Voozh

From Wikipedia, the free encyclopedia

Operation Red October or Red October was a cyberespionage malware program discovered in October 2012 and uncovered in January 2013 by Russian firm Kaspersky Lab. The malware was reportedly operating worldwide for up to five years prior to discovery, transmitting information ranging from diplomatic secrets to personal information, including from mobile devices. The primary vectors used to install the malware were emails containing attached documents that exploited vulnerabilities in Microsoft Word and Excel.^[1]^[2] Later, a webpage was found that exploited a known vulnerability in the Java browser plugin.^[1]^[3] Red October was termed an advanced cyberespionage campaign intended to target diplomatic, governmental and scientific research organizations worldwide.

A map of the extent of the operation was released by the Kaspersky Lab – the "Moscow-based antivirus firm that uncovered the campaign."^[4]

After being revealed, domain registrars and hosting companies shut down as many as 60 domains, used by the virus creators to receive information. The attackers, themselves, shut down their end of the operation, as well.^{[citation needed]}

The perpetrator of the operation has not been conclusively determined but it appeared to have been in operation on some level since May 2007 at the latest. According to Kaspersky Lab, Russian slang words were found in the code which would be "generally unknown to non-native Russian speakers." However, the program also appeared to be built on existing exploits developed by Chinese hackers and previously used against Tibetan activists.^[4]

Operation Red October Cyber Breaches^[4]
Country	Government	Embassy (Diplomatic)	Military	Nuclear / Energy Research	Aerospace	Oil & Gas Industry	Trade and Commerce	Research Institutions	Unknown Victims
👁 Image United States	No	Yes	No	No	No	No	No	No	No
👁 Image Russia	No	Yes	Yes	Yes	No	No	No	Yes	No
👁 Image Belarus	Yes	Yes	Yes	Yes	No	Yes	No	Yes	No
👁 Image Kazakhstan	Yes	Yes	Yes	Yes	Yes	No	No	No	No
👁 Image United Arab Emirates	Yes	Yes	No	Yes	No	Yes	No	No	No
👁 Image Azerbaijan	No	Yes	No	Yes	No	Yes	No	Yes	No
👁 Image Turkmenistan	Yes	No	No	Yes	No	Yes	No	No	No
👁 Image Afghanistan	Yes	Yes	Yes	No	No	No	No	No	No
👁 Image Moldova	Yes	Yes	Yes	No	No	No	No	No	No
👁 Image France	No	Yes	Yes	No	No	No	No	No	No
👁 Image Spain	Yes	Yes	No	No	No	No	No	No	No
👁 Image Armenia	Yes	Yes	No	No	No	No	No	No	No
👁 Image Cyprus	Yes	Yes	No	No	No	No	No	No	No
👁 Image Iraq	Yes	No	No	No	No	No	No	No	No
👁 Image Brunei	Yes	No	No	No	No	No	No	No	No
👁 Image Luxembourg	Yes	No	No	No	No	No	No	No	No
👁 Image India	No	Yes	No	No	No	No	No	No	No
👁 Image Uganda	No	Yes	No	No	No	No	No	No	No
👁 Image Pakistan	No	Yes	No	No	No	No	No	No	No
👁 Image Oman	No	Yes	No	No	No	No	No	No	No
👁 Image Saudi Arabia	No	Yes	No	No	No	No	No	No	No
👁 Image Italy	No	Yes	No	No	No	No	No	No	No
👁 Image Portugal	No	Yes	No	No	No	No	No	No	No
👁 Image Morocco	No	Yes	No	No	No	No	No	No	No
👁 Image Israel	No	Yes	No	No	No	No	No	No	No
👁 Image Jordan	No	Yes	No	No	No	No	No	No	No
👁 Image Greece	No	Yes	No	No	No	No	No	No	No
👁 Image Ireland	No	Yes	No	No	No	No	No	No	No
👁 Image Belgium	No	Yes	No	No	No	No	No	No	No
👁 Image Germany	No	Yes	No	No	No	No	No	No	No
👁 Image Hungary	No	Yes	No	No	No	No	No	No	No
👁 Image Mauritania	No	Yes	No	No	No	No	No	No	No
👁 Image Congo	No	Yes	No	No	No	No	No	No	No
👁 Image South Africa	No	Yes	No	No	No	No	No	No	No
👁 Image Botswana	No	Yes	No	No	No	No	No	No	No
👁 Image Mozambique	No	Yes	No	No	No	No	No	No	No
👁 Image Tanzania	No	Yes	No	No	No	No	No	No	No
👁 Image Kenya	No	Yes	No	No	No	No	No	No	No
👁 Image Lithuania	No	Yes	No	No	No	No	No	No	No
👁 Image Latvia	No	Yes	No	No	No	No	No	No	No
👁 Image Turkey	No	Yes	No	No	No	No	No	No	No
👁 Image Iran	No	Yes	No	No	No	No	No	No	No
👁 Image Uzbekistan	No	Yes	No	No	No	No	No	No	No
👁 Image Kuwait	No	Yes	No	No	No	No	No	No	No
👁 Image Switzerland	No	Yes	No	No	No	No	No	No	No
👁 Image Lebanon	No	Yes	No	No	No	No	No	No	No
👁 Image Austria	No	Yes	No	No	No	No	No	No	No
👁 Image Georgia	No	Yes	No	No	No	No	No	No	No
👁 Image Bosnia & Herzegovina	No	Yes	No	No	No	No	No	No	No
👁 Image Serbia	No	No	No	No	No	No	No	No	Yes
👁 Image Finland	No	No	No	No	No	No	No	No	Yes
👁 Image Czech Republic	No	No	No	No	No	No	No	No	Yes
👁 Image Slovakia	No	No	No	No	No	No	No	No	Yes
👁 Image Macedonia	No	No	No	No	No	No	No	No	Yes
👁 Image Albania	No	No	No	No	No	No	No	No	Yes
👁 Image Mali	No	No	No	No	No	No	No	No	Yes
👁 Image Australia	No	No	No	No	No	No	No	No	Yes
👁 Image Chile	No	No	No	No	No	No	No	No	Yes
👁 Image Brazil	No	No	No	No	No	No	No	No	Yes
👁 Image Ethiopia	No	No	No	No	No	No	No	No	Yes
👁 Image Bulgaria	No	No	No	No	No	No	No	No	Yes
👁 Image Bahrain	No	No	No	No	No	No	No	No	Yes
👁 Image Slovakia	No	No	No	No	No	No	No	No	Yes

References

[edit]

^ ^a ^b McAllister, Neil (16 Jan 2013). "Surprised? Old Java exploit helped spread Red October spyware". The Register.
^ "The "Red October" Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies". Kaspersky Lab. 3 Mar 2014. Archived from the original on 2013-01-15.
^ Goodin, Dan (15 Jan 2013). "Red October relied on Java exploit to infect PCs". Ars Technica.
^ ^a ^b ^c Zetter, Kim (January 14, 2013). "Cybersleuths Uncover 5-Year Spy Operation Targeting Governments, Others". Wired. Retrieved 25 January 2023.

External links

[edit]

Info at kaspersky.com

Hacking in the 2010s

← 2000s

2020s →

Major incidents

2010	Operation Aurora (publication of 2009 events) Australian cyberattacks Operation Olympic Games Operation ShadowNet Operation Payback Operation Socialist
2011	Canadian government DigiNotar DNSChanger HBGary Federal Operation AntiSec PlayStation network outage RSA SecurID compromise
2012	LinkedIn hack Stratfor email leak Operation High Roller
2013	South Korea cyberattack Snapchat hack Cyberterrorism attack of June 25 2013 Yahoo! data breach Singapore cyberattacks
2014	Anthem medical data breach Operation Tovar 2014 celebrity nude photo leak 2014 JPMorgan Chase data breach 2014 Sony Pictures hack Russian hacker password theft 2014 Yahoo! data breach
2015	Office of Personnel Management data breach HackingTeam Ashley Madison data breach TalkTalk data breach VTech data breach Ukrainian Power Grid Cyberattack SWIFT banking hack
2016	Bangladesh Bank robbery Hollywood Presbyterian Medical Center ransomware incident Commission on Elections data breach Democratic National Committee cyber attacks Vietnam Airport Hacks DCCC cyber attacks Indian Bank data breaches Surkov leaks Dyn cyberattack Russian interference in the 2016 U.S. elections 2016 Bitfinex hack
2017	SHAttered 2017 Macron e-mail leaks WannaCry ransomware attack Westminster data breach Petya and NotPetya 2017 Ukraine ransomware attacks Equifax data breach Deloitte breach Disqus breach
2018	Trustico Atlanta cyberattack British Airways data breach SingHealth data breach
2019	Sri Lanka cyberattack Baltimore ransomware attack Bulgarian revenue agency hack WhatsApp snooping scandal Jeff Bezos phone hacking incident

Hacktivism

Groups

Individuals

Major vulnerabilities
publicly disclosed

Evercookie (2010)
iSeeYou (2013)
Heartbleed (2014)
Shellshock (2014)
POODLE (2014)
Rootpipe (2014)
Row hammer (2014)
SS7 vulnerabilities (2014)
WinShock (2014)
JASBUG (2015)
Stagefright (2015)
DROWN (2016)
Badlock (2016)
Dirty COW (2016)
Cloudbleed (2017)
Broadcom Wi-Fi (2017)
EternalBlue (2017)
DoublePulsar (2017)
Silent Bob is Silent (2017)
KRACK (2017)
ROCA vulnerability (2017)
BlueBorne (2017)
Meltdown (2018)
Spectre (2018)
EFAIL (2018)
Exactis (2018)
Speculative Store Bypass (2018)
Lazy FP state restore (2018)
TLBleed (2018)
SigSpoof (2018)
Foreshadow (2018)
Dragonblood (2019)
Microarchitectural Data Sampling (2019)
BlueKeep (2019)
Kr00k (2019)

Malware

2010	Bad Rabbit Black Energy 2 Blackshades Coreflood Kelihos Stuxnet
2011	Citadel Andromeda Alureon Duqu Gameover ZeuS Metulji botnet Stars ZeroAccess botnet
2012	Alina Carna Dexter Dridex FBI MoneyPak Flame Grum Mahdi Shamoon
2013	BlackPOS CryptoLocker DarkSeoul Havex
2014	Brambul Black Energy 3 Carbanak Careto DarkHotel Duqu 2.0 Emotet FinFisher Gameover ZeuS Kronos Regin
2015	CenterPOS Hidden Tear Kasidet Rombertik TeslaCrypt Project Sauron
2016	FastPOS Hitler Industroyer Jigsaw KeRanger Locky Necurs MEMZ Mirai Pegasus Petya and NotPetya Philadelphia PunkeyPOS X-Agent
2017	BrickerBot Kirk LogicLocker Rensenware Triton WannaCry Xafecopy
2018	Annabelle Joanap VPNFilter
2019	R2D2 Tiny Banker Titanium

Retrieved from "https://en.wikipedia.org/w/index.php?title=Red_October_(malware)&oldid=1345628087"

Categories:

Hidden categories:

URL: https://en.wikipedia.org/wiki/Red_October_(malware)

⇱ Red October (malware) - Wikipedia

References

External links