• About Us
  • Contact
  • Careers
  • Send Us a Tip
Menu
  • About Us
  • Contact
  • Careers
  • Send Us a Tip
CyberNews logo
Newsletter
  • Home
  • News
  • Editorial
  • Security
  • Privacy
  • Resources
Menu
  • Home
  • News
  • Editorial
  • Security
  • Privacy
  • Resources
CyberNews logo

Home » News » U.S. cybersecurity firm FireEye says it was hacked by a nation-state

U.S. cybersecurity firm FireEye says it was hacked by a nation-state

by Reuters
9 December 2020
in News
0
U.S. cybersecurity firm FireEye says it was hacked by a nation-state

The FireEye logo is seen outside the company's offices in Milpitas, California, December 29, 2014. REUTERS/Beck Diefenbach

14
SHARES

FireEye, one of the largest cybersecurity companies in the United States, said on Tuesday that it had been hacked, likely by a government, and that an arsenal of hacking tools used to test the defenses of its clients had been stolen.

The hack of FireEye, a company with an array of contracts across the national security space both in the United States and its allies, is among the most significant breaches in recent memory. The company’s shares dropped 8% in after-hours trading. 

The FireEye breach was disclosed in a public filing with the Securities and Exchange Commission citing CEO Kevin Mandia. A blog post by the company said “red team tools” were stolen as part of a highly sophisticated, likely government-backed hacking operation that used previously unseen techniques.

It is not clear exactly when the hack initially took place, but a person familiar with the events said the company has been resetting user passwords over the past two weeks. 

Beyond the tool theft, the hackers also appeared to be interested in a subset of FireEye customers: government agencies. 

The chairman of the House Intelligence Committee, Rep. Adam Schiff, said he would ask for more information. “We have asked the relevant intelligence agencies to brief the Committee in the coming days about this attack, any vulnerabilities that may arise from it, and actions to mitigate the impacts.”

There is no evidence that FireEye’s hacking tools have been used or that client data was stolen. But the Federal Bureau of Investigation and Microsoft Corp are helping to look.

“The FBI is investigating the incident and preliminary indications show an actor with a high level of sophistication consistent with a nation state,” said Matt Gorham, assistant FBI director for the Cyber Division.

A former Defense Department official familiar with the case said that Russia was high on the early list of suspects. In the run-up to the U.S. elections, where Russian interference was a prime concern, U.S. officials exposed some Russian hacking techniques. 

Other security companies have been successfully hacked before, including Bit9, Kaspersky Lab and RSA, underscoring the difficulty in keeping anything digital away from the most sophisticated hackers.

“Plenty of similar companies have also been popped like this,” said a Western security official who asked not to be named. 

“The goal of these operations is typically to collect valuable intelligence that can help them defeat security countermeasures and enable hacking of organizations all over the world,” said Dmitri Alperovitch, co-founder and former chief technology officer at top rival CrowdStrike.

FireEye disclosing what happened and which tools were taken is “helping to minimize the chances of others getting compromised as a result of this breach.”

FireEye said it has been working to shore up defenses against its own tools with different software makers, and it released countermeasures publicly.

Those showed that the tools uses modified versions of public programs, said Vincent Liu, chief executive of security firm Bishop Fox and a former National Security Agency analyst.

The stolen computer kit targets a myriad of different vulnerabilities in popular software products. FireEye CEO Mandia wrote that none of the red team tools exploited so-called “zero-day vulnerabilities,” meaning the relevant flaws should already be public.

Past hacking attacks on government agencies and contractors have captured such higher-value hacking tools, and some of those tools have been published, wrecking their effectiveness as defenses are put in place.

Both the NSA and CIA have been burned this way in the past decade, with Russia a key suspect. Russian and Iranian tools have been hacked and published more recently. Private surveillance software makers have also been targeted. Experts said it is hard to estimate the impact of a tool leak that focuses on known software vulnerabilities, but it could make attackers’ jobs easier.

“Exploitation tools in the wrong hands will lead to more victimization of people who don’t see it coming, and there’s already enough problems like that,” said Paul Ferguson, threat intelligence principal at security company Gigamon. “We don’t really need more exploitation tools floating around making it easier – look at ransomware.”

Whenever private companies learn of a vulnerability in their software products, they often offer a “patch” or upgrade that nullifies the issue. But many users do not install these patches at once, and some do not for months or longer.

(Reporting by Christopher Bing, Joseph Menn and Jack Stubbs; Editing by Lisa Shumaker and Stephen Coates)

Share14TweetShareShare

Related Posts

Wall Street vs Main Street fight quashes hedge funds as GameStop keeps rallying

Wall Street vs Main Street fight quashes hedge funds as GameStop keeps rallying

27 January 2021
Google to stop using Apple tool to track iPhone users, avoiding new pop-up warning

Google to stop using Apple tool to track iPhone users, avoiding new pop-up warning

27 January 2021

‘World’s most dangerous malware’ Emotet disrupted

27 January 2021
GameStop extends Reddit driven hyper-rally after Musk tweet

GameStop extends Reddit driven hyper-rally after Musk tweet

27 January 2021
Next Post
Is PayPal’s crypto move a game-changer for bitcoin?

$11.5 billion in cryptocurrency associated with illicit activity

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

I agree to the Terms & Conditions and Privacy Policy.

Popular News

  • 70TB of Parler users’ messages, videos, and posts leaked by security researchers

    70TB of Parler users’ messages, videos, and posts leaked by security researchers

    83053 shares
    Share 83043 Tweet 0
  • The ultimate guide to safe and anonymous online payment methods in 2021

    13 shares
    Share 13 Tweet 0
  • 8 best cybersecurity podcasts for 2021

    56 shares
    Share 56 Tweet 0
  • Walmart-exclusive router and others sold on Amazon & eBay contain hidden backdoors to control devices

    13365 shares
    Share 13361 Tweet 0
  • Network Attached Storage

    0 shares
    Share 0 Tweet 0
Wall Street vs Main Street fight quashes hedge funds as GameStop keeps rallying

Wall Street vs Main Street fight quashes hedge funds as GameStop keeps rallying

27 January 2021
Google to stop using Apple tool to track iPhone users, avoiding new pop-up warning

Google to stop using Apple tool to track iPhone users, avoiding new pop-up warning

27 January 2021

‘World’s most dangerous malware’ Emotet disrupted

27 January 2021
The satellite-hacker’s guide to the space industry: don’t panic (yet)

The satellite-hacker’s guide to the space industry: don’t panic (yet)

27 January 2021
Man in front of multiple computers

North Korea has been targeting threat researchers

27 January 2021
GameStop extends Reddit driven hyper-rally after Musk tweet

GameStop extends Reddit driven hyper-rally after Musk tweet

27 January 2021
Newsletter

Subscribe for security tips and CyberNews updates.

Email address is required. Provided email address is not valid. You have been successfully subscribed to our newsletter!
Categories
  • News
  • Editorial
  • Security
  • Privacy
  • Resources
  • VPNs
  • Password Managers
  • Secure Email Providers
  • Antivirus Software Reviews
Tools
  • Personal data leak checker
  • Strong password generator
About Us

We aim to provide you with the latest tech news, product reviews, and analysis that should guide you through the ever-expanding land of technology.

Careers

We are hiring.

  • About Us
  • Contact
  • Send Us a Tip
  • Privacy Policy
  • Terms & Conditions
  • Vulnerability Disclosure

© 2021 CyberNews

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy Policy.

Home

News

Editorial

Security

Privacy

Resources

  • About Us
  • Contact
  • Careers
  • Send Us a Tip

© 2020 CyberNews – Latest tech news, product reviews, and analyses.

Subscribe for Security Tips and CyberNews Updates
Email address is required. Provided email address is not valid. You have been successfully subscribed to our newsletter!