"Why does every hacking and cyberscam story – real or fictional – seem to have a Russia connection?
In part, it is prejudice and laziness. The stereotype of the Russian hacker has become such a common media trope that it gets recycled again and again. It also offers a handy update for those looking for new ways to perpetuate the ‘Russian threat.’"
2. Following article line on FSB - anyone knows who hacked PCs of Iran nuke facility? If we judge on who had a reason - US - we shall assume that US have the same or even better hacker team than Russia [very clever OS hack that resulted in hardware malfunction at the nuke plant, thus significantly reducing its output - was covered in 2011].
3. I suspect that most of 'industry analysis' is funded by government agencies, directly or indirectly. So if the conclusion of 'industry analysis' would be that US accounts for 35 or 65 percent of global cybercrime revenue, then the next question would be - what the hell are the various government agencies doing and how effective do they spend government/taxpayers' money?
4. From the same article:
"However, a more basic answer is that a disproportionate number of Russians have worldclass math and computers skills, yet not the kind of jobs to use them legitimately. Although many firms in the industry are based in Russia, or else hire Russians, there is a pool of skilled but under-employed programmers who embrace the hacker world for fun, out of disillusion, or for profit."
Anyone can show me a skilled but under-employed programmer in Russia?
"Skilled but under-emplored programmer in Russia" is like Bigfoot [also known as sasquatch] - everyone heard about him/her, but noone saw. It is a legend...
But of course there are russians, americans, germans, brits, and other nations, which do quite some harm. I just do not think there is a legitimate way to define the winner.
Sorry for off-topic rambling, probably due to habit of enjoying fact-based debate, which resulted from my days in finance ;-))
While my comment was poorly worded, statistically the majority of large botnets like Coreflood, Storm, BredoLab, Rustock, Kelihos are of Russian origin. Even the botnet we are discussing was first seen in Russia.
To comment on a couple of your points
2 - With Stuxnet, I think everyone agrees that US/Israel is to blame. The Russian connection is made because aside from the Iranians, the Russians are the only ones that had access to the facility, and they built the place. A Russian spy is a more likely culprit than a US-Iranian scientist double-agent sabotaging his own facility with results that could kill all of his co-workers.
4- No-one is talking under-employed. These criminals make more money than they ever would at any other job selling access to their botnet, advertising, spamming, installing fake virus software, stealing credit cards, etc. etc.
This gives rise to entities like the Russian Business Network (RBN)
Anyway, I meant no offense, if only americans or brits were clever enough to create a similar profile or stereotype, but I think some script kids guessing passwords pales in comparison to outsmarting the worlds largest software vendors and security researchers.
You are correct on #4. I've heard some stories about hrackers storing piles of cash under the couch [this case was in Ukraine], made from cracking banks/ATMs. Definitely, black activities are much more profitable. But I do not think that [in real life] those that crack get most of the money, with few exceptions. Biggest pile usually goes to those who organize or cover (underworld Board/CEO equivalent).
However, the start-up fever, which started in Russia appr. 1-1.5 years ago, is getting traction, as well as tech industry. This provides more opportunities and better risk/reward ratio and shall result in that more and more people will be moving to bright side.
>"Skilled but under-emplored programmer in Russia" is like Bigfoot [also known as sasquatch] - everyone heard about him/her, but noone saw. It is a legend...
Well, Group-IB (a Russian computer security company) seems to disagree:
In Russia the situation is additionally worsen by a great amount of
technical universities graduates and by unstable home economy
situation as the result of which the mentioned specialists cannot
find highly paid legal income.
I don't know where they get the data from, though.
But of course there are russians, americans, germans, brits, and other nations, which do quite some harm. I just do not think there is a legitimate way to define the winner.
Sure, it's still a prejudice, I was just pointing out it's not completely irrational.
> "Skilled but under-emplored programmer in Russia" is like Bigfoot [also known as sasquatch] - everyone heard about him/her, but noone saw. It is a legend...
Pretty good observation. I think most people are operating on 10-12 year old data when they think that. They think "fall of the Soviet Union" with now hungry scientists slowly turning to the dark side to become less hungry mad scientists who will inflict pain and suffering upon us all.
Perceptions are funny thing [except when from yr boss]...
I recall that in 1997-1998, when I was helping Coca-Cola establish plant in Vladivostok (Far East near Japan, 0.5 mil population), some people were concerned to go there because of tigers and bears wandering in the streets...
Just to point to a couple of facts:-
1. From the same article:
"Why does every hacking and cyberscam story – real or fictional – seem to have a Russia connection?
In part, it is prejudice and laziness. The stereotype of the Russian hacker has become such a common media trope that it gets recycled again and again. It also offers a handy update for those looking for new ways to perpetuate the ‘Russian threat.’"
2. Following article line on FSB - anyone knows who hacked PCs of Iran nuke facility? If we judge on who had a reason - US - we shall assume that US have the same or even better hacker team than Russia [very clever OS hack that resulted in hardware malfunction at the nuke plant, thus significantly reducing its output - was covered in 2011].
3. I suspect that most of 'industry analysis' is funded by government agencies, directly or indirectly. So if the conclusion of 'industry analysis' would be that US accounts for 35 or 65 percent of global cybercrime revenue, then the next question would be - what the hell are the various government agencies doing and how effective do they spend government/taxpayers' money?
4. From the same article:
"However, a more basic answer is that a disproportionate number of Russians have worldclass math and computers skills, yet not the kind of jobs to use them legitimately. Although many firms in the industry are based in Russia, or else hire Russians, there is a pool of skilled but under-employed programmers who embrace the hacker world for fun, out of disillusion, or for profit."
Anyone can show me a skilled but under-employed programmer in Russia?
"Skilled but under-emplored programmer in Russia" is like Bigfoot [also known as sasquatch] - everyone heard about him/her, but noone saw. It is a legend...
But of course there are russians, americans, germans, brits, and other nations, which do quite some harm. I just do not think there is a legitimate way to define the winner.
Sorry for off-topic rambling, probably due to habit of enjoying fact-based debate, which resulted from my days in finance ;-))