Edge Rewrite
// HTMLRewriter · presentation

This page was redesigned at the edge.

Cloudflare fetched the original article and streamed it through HTMLRewriter to apply an entirely new visual system without rebuilding the source page.

// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a24732a128676e2a

Jump to content

// Workers AI · dad joke modeWhat did Red October say to the computer? "You've been infected, comrade.

From Wikipedia, the free encyclopedia

Operation Red October or Red October was a cyberespionage malware program discovered in October 2012 and uncovered in January 2013 by Russian firm Kaspersky Lab. The malware was reportedly operating worldwide for up to five years prior to discovery, transmitting information ranging from diplomatic secrets to personal information, including from mobile devices. The primary vectors used to install the malware were emails containing attached documents that exploited vulnerabilities in Microsoft Word and Excel.[1][2] Later, a webpage was found that exploited a known vulnerability in the Java browser plugin.[1][3] Red October was termed an advanced cyberespionage campaign intended to target diplomatic, governmental and scientific research organizations worldwide.

A map of the extent of the operation was released by the Kaspersky Lab – the "Moscow-based antivirus firm that uncovered the campaign."[4]

After being revealed, domain registrars and hosting companies shut down as many as 60 domains, used by the virus creators to receive information. The attackers, themselves, shut down their end of the operation, as well.[citation needed]

The perpetrator of the operation has not been conclusively determined but it appeared to have been in operation on some level since May 2007 at the latest. According to Kaspersky Lab, Russian slang words were found in the code which would be "generally unknown to non-native Russian speakers." However, the program also appeared to be built on existing exploits developed by Chinese hackers and previously used against Tibetan activists.[4]

Operation Red October Cyber Breaches[4]
CountryGovernmentEmbassy (Diplomatic)MilitaryNuclear / Energy ResearchAerospaceOil & Gas IndustryTrade and CommerceResearch InstitutionsUnknown Victims
United StatesNoYesNoNoNoNoNoNoNo
RussiaNoYesYesYesNoNoNoYesNo
BelarusYesYesYesYesNoYesNoYesNo
KazakhstanYesYesYesYesYesNoNoNoNo
United Arab EmiratesYesYesNoYesNoYesNoNoNo
AzerbaijanNoYesNoYesNoYesNoYesNo
TurkmenistanYesNoNoYesNoYesNoNoNo
AfghanistanYesYesYesNoNoNoNoNoNo
MoldovaYesYesYesNoNoNoNoNoNo
FranceNoYesYesNoNoNoNoNoNo
SpainYesYesNoNoNoNoNoNoNo
ArmeniaYesYesNoNoNoNoNoNoNo
CyprusYesYesNoNoNoNoNoNoNo
IraqYesNoNoNoNoNoNoNoNo
BruneiYesNoNoNoNoNoNoNoNo
LuxembourgYesNoNoNoNoNoNoNoNo
IndiaNoYesNoNoNoNoNoNoNo
UgandaNoYesNoNoNoNoNoNoNo
PakistanNoYesNoNoNoNoNoNoNo
OmanNoYesNoNoNoNoNoNoNo
Saudi ArabiaNoYesNoNoNoNoNoNoNo
ItalyNoYesNoNoNoNoNoNoNo
PortugalNoYesNoNoNoNoNoNoNo
MoroccoNoYesNoNoNoNoNoNoNo
IsraelNoYesNoNoNoNoNoNoNo
JordanNoYesNoNoNoNoNoNoNo
GreeceNoYesNoNoNoNoNoNoNo
IrelandNoYesNoNoNoNoNoNoNo
BelgiumNoYesNoNoNoNoNoNoNo
GermanyNoYesNoNoNoNoNoNoNo
HungaryNoYesNoNoNoNoNoNoNo
MauritaniaNoYesNoNoNoNoNoNoNo
CongoNoYesNoNoNoNoNoNoNo
South AfricaNoYesNoNoNoNoNoNoNo
BotswanaNoYesNoNoNoNoNoNoNo
MozambiqueNoYesNoNoNoNoNoNoNo
TanzaniaNoYesNoNoNoNoNoNoNo
KenyaNoYesNoNoNoNoNoNoNo
LithuaniaNoYesNoNoNoNoNoNoNo
LatviaNoYesNoNoNoNoNoNoNo
TurkeyNoYesNoNoNoNoNoNoNo
IranNoYesNoNoNoNoNoNoNo
UzbekistanNoYesNoNoNoNoNoNoNo
KuwaitNoYesNoNoNoNoNoNoNo
 SwitzerlandNoYesNoNoNoNoNoNoNo
LebanonNoYesNoNoNoNoNoNoNo
AustriaNoYesNoNoNoNoNoNoNo
GeorgiaNoYesNoNoNoNoNoNoNo
Bosnia & HerzegovinaNoYesNoNoNoNoNoNoNo
SerbiaNoNoNoNoNoNoNoNoYes
FinlandNoNoNoNoNoNoNoNoYes
Czech RepublicNoNoNoNoNoNoNoNoYes
SlovakiaNoNoNoNoNoNoNoNoYes
MacedoniaNoNoNoNoNoNoNoNoYes
AlbaniaNoNoNoNoNoNoNoNoYes
MaliNoNoNoNoNoNoNoNoYes
AustraliaNoNoNoNoNoNoNoNoYes
ChileNoNoNoNoNoNoNoNoYes
BrazilNoNoNoNoNoNoNoNoYes
EthiopiaNoNoNoNoNoNoNoNoYes
BulgariaNoNoNoNoNoNoNoNoYes
BahrainNoNoNoNoNoNoNoNoYes
SlovakiaNoNoNoNoNoNoNoNoYes

References

[edit]
  1. 1 2 McAllister, Neil (16 Jan 2013). "Surprised? Old Java exploit helped spread Red October spyware". The Register.
  2. "The "Red October" Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies". Kaspersky Lab. 3 Mar 2014. Archived from the original on 2013-01-15.
  3. Goodin, Dan (15 Jan 2013). "Red October relied on Java exploit to infect PCs". Ars Technica.
  4. 1 2 3 Zetter, Kim (January 14, 2013). "Cybersleuths Uncover 5-Year Spy Operation Targeting Governments, Others". Wired. Retrieved 25 January 2023.
[edit]