Viewing a single comment thread. View all comments

ElevenLongships t1_j9lpdfp wrote

I mean, from what I can tell Russian hackers are trying to break into literally everything.

194

WaxyWingie t1_j9m8jdv wrote

They succeed at least some of the time.

38

VegasKL t1_j9n7d7c wrote

It's arguably one of the few things they are actually competent at. Probably because it's a lot harder for corruption to steal resources from the hacking groups when they just need the internet.

The military on the other hand .. lots to plunder there.

30

Hibatica t1_j9n8j22 wrote

This could be complete BS but I heard (way before the war) that it was legal for Russians to hack non Russian targets. idk.

15

iieer t1_j9nhkg9 wrote

Not actually legal, but commonly ignored by the authorities, especially if those hackers also are willing to play on the national team (aka hack for the Russian authorities). It's the reasons that some malware (example) has functions that automatically shut it down if it detects use of Russian language on a target, e.g. a computer where the word processing application is installed with a Russian language package or a virtual keyboard in Russian. By setting those limits, they reduce the risk of incidentally hitting a Russian target and pissing off the Russian authorities.

25

freeman_joe t1_j9t12zl wrote

So if whole world installs on windows also Russian language everybody is safe?

1

ReallyLegitX t1_j9nhkj8 wrote

Less legal and more russia isn't going to let anyone extradite you to the EU or any other country really. And you generate enough trouble they'll just make you state sponsored instead as suspected with some of the more prevalent ransomware groups operating out of Russia.

8

aDrunkWithAgun t1_j9scynb wrote

NK would like a word and china, let's be real they have computer science light-years a head of the west

We should be focused on computers in mid school.

1

Hopeful_Hamster21 t1_j9p2bk8 wrote

Set up a web server and then check your http logs. My web server gets "attacked" probably 2 or 3 DOZEN times A DAY. It's usually just automated scanning tools looking for well known WordPress vulnerabilities (I'm not running WordPress), but it's there. Turn on RRP RDP, and you'll see someone hitting your server ONCE A SECOND, and this will go on indefinitely.

If you check the source IPs, they're commonly Russia, or China, but I don't really trust those source IPs to be accurate - the attackers could be going through a proxy. The RDP attacks look like they're coming from a bot net, because each second the IP shifts to a different country.

Edit: fixed a typo

6

LomaSpeedling t1_j9xq8cc wrote

My hetzner and cloudflare logs are always interesting to look at.

1

whatistheformat t1_j9pb45l wrote

It's what they do instead of innovating or supporting science for that matter.

1