FBI quietly breaking into US corporate computers

[Klaralven]

The FBI has the authority right now to access privately owned computers without their owners’ knowledge or consent, and to delete software.

It’s part of a government effort to contain the continuing attacks on corporate networks running Microsoft Exchange software, and it’s an unprecedented intrusion that’s raising legal questions about just how far the government can go.

On April 9, the United States District Court for the Southern District of Texas approved a search warrant allowing the US Department of Justice to carry out the operation.

The software the FBI is deleting is malicious code installed by hackers to take control of a victim’s computer. Hackers have used the code to access vast amounts of private email messages and to launch ransomware attacks.

The authority the Justice Department relied on and the way the FBI carried out the operation set important precedents. They also raise questions about the power of courts to regulate cybersecurity without the consent of the owners of the targeted computers.

https://asiatimes.com/2021/04/fbi-quietly-breaking-into-us-corporate-computers/

[fescuerescue]

1. I'm surprised they have the resources to do this

Last edited Thu Apr 29, 2021, 01:49 PM - Edit history (1)

68,000 companies are impacted.

I feel like something is missing from the story. This is my line of business. I read the story and something isn't being said. Just can't put my finger on it.

Everyday, every moment there are exploits and hacks going on. I see them every day and companies pay lots of money to cleanup.
Sometimes ridiculous amounts of money.

What makes this one so special that the FBI cleaning it up for everyone (for free)?

[alwaysinasnit]

4. +1000

[Volaris]

9. Isnt the Exchange code part of the Solar Winds hack?

[milestogo]

2. Are they raising money via ransomware attacks?

[Dan]

3. And the alternative is?

Unless Microsoft addresses this with an Update that does not need your consent to run, then the code resides forever.

Of course, there is the possibility that some Network Security software (Norton, McAfee, etc.,) can also run some purging updates (with or without your consent).

I guess the point I’m trying to make, it probably needs to be done - and if the Government really wanted to do something without informing us - we probably wouldn’t know it, except for the super savvy techs, and major software companies.

[48656c6c6f20]

5. Hackers dream

Unless Microsoft addresses this with an Update that does not need your consent to run, then the code resides forever

Nothing could possibly go wrong by removing consent lol

[fescuerescue]

7. Same way the other 100,000 exploits are resolved.

Patches and experts applying patches.

Something is different about this one that the Feds want to do this for 68,000 companies - for free.

[SWBTATTReg]

6. I laughed when I heard this. Sure, the FBI has tons of heavy duty expertise to supposedly

break into every single type of platform out there, and remove so called malicious code. If you don't realize it by now, I'm being sarcastic here.

And then what? If one installs/modifies/deletes a portion of/or all of a batch of source code (as well as all of the embedded tables, files, etc. linked in too during this whole process), it's got to be recompiled, re-linked and edited, and the executable load module re-installed
(for the modified code to be effective), at multiple locations/CPU platforms to be effective.

Yeah, right...one little application I had under me had over 1 million lines of source code, as well as approximately 100 tables, etc. One application. We had over 100,000 programs alone at SWBT-AT&T, spread over 7 different data centers. How in the hell would they even ever ID every single computer system out there? This is including the Russians too...

I think that too broad of a stroke, too much credit is given to the Russians as well as, ha ha heh, the FBI on their capabilities. SMH.

[fescuerescue]

8. Yea. Something is off

This is probably a cover story.