Dan Goodin — Russia reportedly stole NSA secrets with help of Kaspersky—what we know now

The Wall Street Journal just published an incendiary article that says hackers working for the Russian government stole confidential material from an NSA contractor's home computer. The hackers did so, according to the WSJ, after identifying files though the contractor's use of antivirus software from Moscow-based Kaspersky Lab.

The report may well be true, but, for now, there's no way to independently confirm it. The report is based on unnamed people the publication says had knowledge of the matter, and it provides no evidence to support its claim. What's more, the lack of detail leaves open the possibility that, even if Kaspersky's AV did help Russia home in on the highly sensitive code and documents, the disclosure was the inadvertent result of a software bug and that no one from Kaspersky Lab cooperated with the attackers in any way. Also lost in the focus on Kaspersky Lab is the startling revelation that yet another NSA insider managed to sneak classified material outside of the NSA's network and put it on an unsecured computer. More of this analysis will follow.

First, here's a summary of what the WSJ reported.…

Another hit job?

Ars Technica
Russia reportedly stole NSA secrets with help of Kaspersky—what we know now
Dan Goodin