Este es un foro dedicado a las Fuerzas Armadas Mexicanas así como de los diferentes Cuerpos de Policía y demás entes que se dedican a la Seguridad interna de México.


Ataque cibernético a Lockheed Martin

Comparte
avatar
Defekator
Teniente
Teniente

Mensajes : 2274
Masculino
Edad : 38
Localización : Lyon Guanajuato

Ataque cibernético a Lockheed Martin

Mensaje por Defekator el 28/5/2011, 11:39 pm

¡Abusados! haber si nos encontramos con los blueprints de un F-35 en la red

Lockheed Martin hit by computer attack


Lockheed Martin Corp., the world's largest aerospace company, said Saturday it detected and thwarted "a significant and tenacious attack" on its information systems a week ago.

"As a result of the swift and deliberate actions taken to protect the network and increase IT security, our systems remain secure," said Jennifer Whitlow, a Lockheed spokeswoman. "No customer, program or employee personal data has been compromised."

The Department of Homeland Security and the Defense Department have offered to help gauge the scope of the incident involving the defense contractor.

A person with direct knowledge of the incident said Friday that unknown attackers had broken into sensitive networks of Lockheed Martin and several other U.S. military contractors.

The hackers breached security systems designed to keep out intruders by creating duplicate electronic keys, said the source, who was not authorized to discuss the matter publicly.

The Defense Department said the effect of the Lockheed cyber attack on the Pentagon was "minimal," and it expected no harm to result.

Los Angeles Times
avatar
Defekator
Teniente
Teniente

Mensajes : 2274
Masculino
Edad : 38
Localización : Lyon Guanajuato

Hackers breach US military contractors' networks

Mensaje por Defekator el 28/5/2011, 11:42 pm

BOSTON/WASHINGTON, May 27 (Reuters) - Unknown hackers have broken into the security networks of Lockheed Martin Corp and several other U.S. military contractors, a source with direct knowledge of the attacks told Reuters.

They breached security systems designed to keep out intruders by creating duplicates to "SecurID" electronic keys from EMC Corp's RSA security division, said the person who was not authorized to publicly discuss the matter.

It was not immediately clear what kind of data, if any, was stolen by the hackers. But the networks of Lockheed and other military contractors contain sensitive data on future weapons systems as well as military technology currently used in battles in Iraq and Afghanistan.

Weapons makers are the latest companies to be breached through sophisticated attacks that have pierced the defenses of huge corporations including Sony , Google Inc and EMC Corp . Security experts say that it is virtually impossible for any company or government agency to build a security network that hackers will be unable to penetrate.

The Pentagon, which has about 85,000 military personnel and civilians working on cybersecurity issues worldwide, said it also uses a limited number of the RSA electronic security keys, but declined to say how many for security reasons.

The hackers learned how to copy the security keys with data stolen from RSA during a sophisticated attack that EMC disclosed in March, according to the source.

EMC declined to comment on the matter, as did executives at major defense contractors.

Rick Moy, president of NSS Labs, an information security company, said the original attack on RSA was likely targeted at its customers, including military, financial, governmental and other organizations with critical intellectual property.

He said the initial RSA attack was followed by malware and phishing campaigns seeking specific data that would link tokens to end-users, which meant the current attacks may have been carried out by the same hackers.

"Given the military targets, and that millions of compromised keys are in circulation, this is not over," he said.

Lockheed, which employs 126,000 people worldwide and had $45.8 billion in revenue last year, said it does not discuss specific threats or responses as a matter of principle, but regularly took actions to counter threats and ensure security.

"We have policies and procedures in place to mitigate the cyber threats to our business, and we remain confident in the integrity of our robust, multi-layered information systems security," said Lockheed spokesman Jeffery Adams.

Executives at General Dynamics Corp ,, Boeing Co , Northrop Grumman Corp , Raytheon Co and other defense companies declined to comment on any security breaches linked to the RSA products.

"We do not comment on whether or not Northrop Grumman is or has been a target for cyber intrusions," said Northrop spokesman Randy Belote.

ACTIONS PREVENTED WIDESPREAD DISRUPTION

Raytheon spokesman Jonathan Kasle said his company took immediate companywide actions in March when incident information was initially provided to RSA customers.

"As a result of these actions, we prevented a widespread disruption of our network," he said.

Boeing spokesman Todd Kelley said his company had a "wide range" of systems in place to detect and prevent intrusions of its networks. "We have a robust computing security team that constantly monitors our network," he said.

Defense contractors' networks contain sensitive data on sophisticated weapons systems, but all classified information is kept on separate, closed networks managed by the U.S. government, said a former senior defense official, who was not authorized to speak on the record.

SecurIDs are widely used electronic keys to computer systems that work using a two-pronged approach to confirming the identity of the person trying to access a computer system. They are designed to thwart hackers who might use key-logging viruses to capture passwords by constantly generating new passwords to enter the system.

The SecurID generates new strings of digits on a minute-by-minute basis that the user must enter along with a secret PIN (personal identification number) before they can access the network. If the user fails to enter the string before it expires, then access is denied.

RSA and other companies have produced a total of about 250 million security tokens, although it is not clear how many are in use worldwide at present, said the former defense official.

The devices provided additional security at a lower cost than biometrics such as fingerprint readers or iris scanning machines, said the official, noting that the RSA incident could increase demand for greater use of biometric devices.

The RSA breach did raise concerns about any security tokens that had been compromised, and EMC now faced tough questions about whether "they can repair that product line or whether they need to ditch it and start over again," he said.

EMC disclosed in March that hackers had broken into its network and stolen some information related to its SecurIDs. It said the information could potentially be used to reduce the effectiveness of those devices in securing customer networks.

EMC said it worked with the Department of Homeland Security to publish a note on the March attack, providing Web addresses to help firms identify where the attack might have come from.

It briefed individual customers on how to secure their systems. In a bid to ensure secrecy, the company required them to sign nondisclosure agreements promising not to discuss the advice that it provided in those sessions, according to two people familiar with the briefings. — Reuters

Supongo que en la investigación no encontraron que se robaran nada, por eso lo hacen público. Como sea hay que checar la red a ver si nos encontramos algo para la sedena
avatar
Enemigo Público
Kapitan - Sovetskaya Armiya
Kapitan - Sovetskaya Armiya

Mensajes : 7838
Masculino
Edad : 29
Localización : Huaxyacac

Re: Ataque cibernético a Lockheed Martin

Mensaje por Enemigo Público el 28/5/2011, 11:47 pm

Seguro ya refirzaron la seguridad, de todos modos no creo que se haya causado daño real.

Ninguna empresa de defensa es tan estúpida como para dejar información confidencial en servidores con acceso directo a internet.
avatar
Don Vader
Darkest Lord Of The Sith

Mensajes : 2711
Masculino

Re: Ataque cibernético a Lockheed Martin

Mensaje por Don Vader el 28/5/2011, 11:52 pm

De que los hay los hay y no faltaria algun inge de desarrollo huevon que en lugar de hacer respaldos, dejaba todo en el servidor.

Quien habra sido.. Chinos, Iranies, norcoreanos??
avatar
Albert_B
Terrible Gran Inquisidor

Mensajes : 5521
Localización : Tártaro

Re: Ataque cibernético a Lockheed Martin

Mensaje por Albert_B el 29/5/2011, 12:21 am

AlQaeda, o LoqueQueda.


___________________________________
¡No eres completamente inútil, sirves de mal ejemplo!
"El día que se inventaron las excusas se acabaron los pendejos."
"Una vida que no puede someterse a examen, no merece vivirla" Sócrates
"Sólo el día que el último rey sea colgado de las tripas del último cura el hombre será realmente libre"

Contenido patrocinado

Re: Ataque cibernético a Lockheed Martin

Mensaje por Contenido patrocinado


    Fecha y hora actual: 19/8/2017, 2:25 am