So, it is of interest to read the lessons of groups who have failed, and this week’s lesson comes from a company who boaested that they identified and fought against several pieces of malware in the past before they were even known of. This time, the attackers grabbed their certificates. To what end is still not known.
Security Firm Bit9 Hacked, Used to Spread Malware — Krebs on Security
Boring? Yes; company gets hacked. Security firm gets hacked is getting routine.
The method is interesting through. The firm had the technology on their own shelf yet somehow the bad guys found the systems that were exposed through negligence.
And your system?