In-depth

RSA does the inevitable: Nation state blamed for hack

Tom Brewster thinks RSA has said nothing much at all about the hacks, which will most likely only hurt the company more.

RSA

COMMENT RSA has finally gotten round to claiming a nation state was behind the attacks on the company earlier this year, basically saying what everyone else was thinking.

Talking at the RSA Security Conference in London, executive chairman Art Coviello and other execs said the vendor had been targeted by two groups from one nation state.

In reality, very little new information emerged. We had already suspected a foreign power of wrongdoing here. The biggest indicator was the fact that the SecureID information taken was used to target US contractor Lockheed Martin. We are, of course, guessing. RSA is still guessing to some extent too no actual extra evidence has emerged to implicate a nation state.

With these new statements from Coviello, which confirmed nothing much at all, RSA hasn't made itself look much smarter.

Questions will now turn to what nation state was to blame. We haven't had to wait for conjecture to spew out of onlookers' mouths, with fingers already pointing at China.

Some may have been surprised by Coviello's reticence over which nation was to blame, but it should have come as no shock to anyone.

RSA has again highlighted a major issue with attacks purportedly involving a nation state: it is close to impossible to blame anyone. When China was recently questioned over its involvement in a hit on Mitsubishi Heavy Industries, with Chinese characters even found in the implicated malware's code, the country could easily deny the accusations by saying someone else planted those ideograms there. Nations accused of attacks can simply claim they themselves were the victims of clandestine actions of others.

Everything is so nebulous around these kinds of attacks that there is little one can take away with surety from the whole nefarious saga.

Out of control

There is one thing we can be sure of though: RSA has not come out of this well.

When the company's admission came out in March, the company came under fire for not informing the world sooner.

And with these new statements from Coviello, which confirmed nothing much at all, RSA hasn't made itself look much smarter. Given the initial breach, which appeared to trick RSA employees into opening a malicious attachment with a very simple piece of social engineering, made EMC's security arm look a tad silly, you'd have hoped it would have come out looking in control.

Yet RSA gave some confusing messages. If it was able to see there were two hacking groups were involved, one said to be more visible than the other and known to "authorities", then why could it not track down, or at least have a strong idea, of which nation state was involved?

On the surface, it seems as though Coviello and Co know plenty about how and why the attack happened, possibly who the perpetrators were. So why do we still know so little?

RSA should be using this week as a chance to show its teeth and prove it has a firm grip on the case. We should all hope it gets back on the right track soon - if security companies aren't in control, then everyone should worry.

Featured Resources

Unleashing the power of AI initiatives with the right infrastructure

What key infrastructure requirements are needed to implement AI effectively?

Download now

Achieve today. Plan tomorrow. Making the hybrid multi-cloud journey

A Veritas webinar on implementing a hybrid multi-cloud strategy

Download now

A buyer’s guide for cloud-based phone solutions

Finding the right phone system for your modern business

Download now

The workers' experience report

How technology can spark motivation, enhance productivity and strengthen security

Download now

Recommended

TikTok vulnerability exposed private user data
data protection

TikTok vulnerability exposed private user data

26 Jan 2021
SonicWall hacked via zero-day flaw in remote access tools
Security

SonicWall hacked via zero-day flaw in remote access tools

25 Jan 2021
Global ransom DDoS extortionists are retargeting companies
distributed denial of service (DDOS)

Global ransom DDoS extortionists are retargeting companies

22 Jan 2021
Best ransomware removal tools
ransomware

Best ransomware removal tools

22 Jan 2021

Most Popular

How to move Windows 10 from your old hard drive to SSD
operating systems

How to move Windows 10 from your old hard drive to SSD

21 Jan 2021
WhatsApp could face €50 million GDPR fine
General Data Protection Regulation (GDPR)

WhatsApp could face €50 million GDPR fine

25 Jan 2021
How to recover deleted emails in Gmail
email delivery

How to recover deleted emails in Gmail

6 Jan 2021