Governments As Malware Authors: The Next Generation
summary
States hack CAs to mint DigiNotar rogue certs (Iran-linked) and a CA’s secret disclosure causes bankruptcy; at least 20–30 countries legally deploy law‑enforcement malware for remote infection; offensive tools include commercial suites FinFisher and RCS, Flame’s MS‑signed binaries, and Stuxnet‑style sabotage; recent campaigns: CosmicDuke social‑engineered screensavers, Havex infected ICS vendor downloads, Agent.BDZ/Uroboros exfiltrating air‑gapped USBs; governments and contractors openly recruit exploit developers and zero‑day authors, showing industrialized offensive capability.
AI-written summary · about
chapters (12)
- 0:00The myth of bankruptcies
- 1:26The fall of DigiNotar
- 4:16Rise of government malware
- 5:59Cyber arms race
- 9:03Law enforcement malware
- 13:53Espionage and surveillance
- 17:27Cyber sabotage
- 19:06Chinese cyber activity
- 24:24Russian cyber activity
- 33:43Post-Stuxnet era
- 40:59Outsourced malware tools
- 47:52Western surveillance
related talks
30mMalicious Code-signing at Scale: How Attackers Impersonate Thousands of Real Businesses
25mGlobal Threat Brief: Hacks and Adversaries Unveiled
44m The Nation State Actor Ate My Homework!
26mTechnical Tracks
16mNation-State Threats in the Open-Source Software Supply Chain
30mDeception at Scale: How Malware Abuses Trust
01h 23mRound-table, Government hacking in different national contexts and strategies ...
30mBroken Links: Emergence and Future of Software-Supply Chain Compromises