Fxmsp Chat Logs Reveal the Hacked Antivirus Vendors, AVs Respond

[Firefox]

A report last week about Fxmsp hacker group claiming access to the networks and source code of three antivirus companies with offices in the U.S. generated from alleged victims statements that are disputed by the firm that sounded the alarm.

Up until this week, the names of the victims remained undisclosed to the public due to the sensitive nature of the matter and because authorities had been alerted of the incidents.

But the cat's out of the bag right now, as the victim antivirus companies have released statements that either downplay, contradict the findings, or have decided to neither deny nor confirm the incident.

BleepingComputer has obtained exclusive unredacted evidence from fraud prevention company AdvIntel showing communication from the Fxmsp hacker collective naming three of the victims.

AdvIntel has collected information about the activity of Fxmsp and its sellers on underground forums (mostly Russian speaking) and gathered instant messaging logs of the actor discussing their access and trove of data they were advertising to sell for up to $300,000.

GET FULL STORY: Bleeping Computer

[exile360]

Thanks for posting this.  I saw the article as well but wasn't sure if I should post it or not given that much of the info isn't fully confirmed yet (as I understand it only Trend has been confirmed so far to have actually been breached, and they apparently are disputing just how extensive the breach was).

Anyway, hopefully it wasn't too bad and no customer data was compromised.  We can only hope.  Obviously this could provide valuable data to the bad guys on how to bypass some AVs, so that's terrible.  Hopefully they don't find the leaked content to be of any use in their nefarious efforts, assuming the data ends up in the hands of anyone looking to develop malware or similar threats.