[Dailydave] Getting called out

[Brian Keefer]

On Jan 14, 2013, at 7:41 AM, Dave Aitel wrote:

> http://www.wired.com/threatlevel/2013/01/red-october-spy-campaign/
> 
> That's what it looks like when the Russians call the Chinese out for
> pretending to be them. How cool is that! "Here we are, pretending to
> think it's a Russian trojan because of all that tricky Russian slang
> left in the code. BUT WAIT, they're using exploit chains out of China!
> And they use the Chinese target set! We will let you draw your own
> conclusions."
> 
> -dave

Is it just as plausible that the Russians are stealing all the good Chinese exploits because the Chinese have shit OPSEC? Why do all the fuzzing and exploit dev when you can just smash & grab the weaponized goods?

--
bk