This line still freaks me out (from Mandiant's APT1 report): "The longest time period APT1 maintained access to a victim’s network was 1,764 days, or four years and ten months." Tweet added by Ryan Naraine @ryanaraine

Ryan Naraine

3 years

This line still freaks me out (from Mandiant's APT1 report): "The longest time period APT1 maintained access to a victim’s network was 1,764 days, or four years and ten months."

4

18

105

Halvar Flake

@halvarflake

3 years

@ryanaraine Talk to some old school hackers over beers. It's not uncommon to find an old backdoor alive 7 years later.

4

8

49

Brian Bartholomew

@Mao_Ware

3 years

@ryanaraine I think that record can easily be shattered by other actors at this stage.

0

1

patrick orzechowski

@shftleft

3 years

@ryanaraine @octal There are folks that have been ghosts in networks since the early 2000s. I’m going to start a new field “cyber archaeology” to find dead actors’ vestiges.

0

2

Wolpertwo 📯

@Wolpertwo

3 years

@ryanaraine @kb6nzv ... as observed by Mandiant. May have stayed longer in other networks where they had no visibility.

1

0

2

Replies