Thursday, January 24, 2013

Costin Raiu at Kaspersky on Red October

Really interesting article and podcast at Digital Underground  discusses Red October and their techniques in analysis.

He states that it's fundamentally different from Flame in that it's 1000 modules instead of Flames one huge one, although it seems to me that it does similar functions.

He also says he believes that it's someone pretending to be Chinese, like a "false flag operation".


No comments: