Swiss CERT publishes reveals details of defence contractor hack

Swiss defence contractor RUAG and the country's GovCERT have revealed the details of a 2014 network breach in which attackers got access to a stunning 23 GB of data. RUAG's business covers defence, aerospace (including drones), and ammunition technology, making it a very attractive target for espionage. The breach was only …

[Anonymous Coward]

Nothing flashy at all, elegant though.

[Anonymous Coward]

It's criminal..

It's criminal that data of that level of sensitivity wasn't locked away in a separately controlled subnet.

That being said, this wasn't done by amateurs. That level of technical expertise and patience suggests state actors.

[Anonymous Coward]

Active Directory Defence hack

"RUAG's business covers defence, aerospace (including drones), and ammunition technology, making it a very attractive target for espionage".

What were these 23GBs worth of defense contractor files doing on a computer connected to the Internet.

[Anonymous Coward]

"A stunning 23 GB of data"?

These days 23 GB can be a whole lot of nothing. You can't tell whether a breach is serious by its size, but only by its content.