back to article Derelict TrueCrypt Russia portal 'is command hub for Ukraine spying op'

Malware used to attack Ukrainian government, military, and major news agencies in the country, was distributed from the Russian portal of encryption utility TrueCrypt, new research has revealed. Security peeps at ESET discovered a connection to a Russian version of the now discontinued popular source-is-available encryption …

  1. ZSn

    MMM

    Didn't MMM implode a long time ago - why are they interested in last centuries Ponzi schemes?

    1. iromko

      Re: MMM

      Original MMM indeed imploded a long time ago. One of its organizers even did some jail time, IIRC.

      But then a new generation grew up and he decided to market the MMM brand once more, saying he was sincere before, and if not for some evil people who undermined the enterprise, it'd have succeded. This time there are many independent Ponzi scheme franchises under MMM brand, so if one falls, it's just evil people in that particular franchise. People joining it know about the scheme, but they believe if they join early they can pull out in time with a profit.

  2. Bob Dole (tm)
    FAIL

    When the developer...

    When the developer says, "So long and thanks for all the fish!" while also saying "Don't use this" there's probably a reason for that.

    Maybe those people still downloading it ought to listen a bit.

    1. John H Woods Silver badge

      Re: When the developer...

      "When the developer says, "So long and thanks for all the fish!" while also saying "Don't use this" there's probably a reason for that." -- Bob Dole

      This is a version with a back-door. That doesn't mean the original version has a back-door (or that it doesn't). The TrueCrypt goodbye message looks a lot more like a warrant canary than anything else.

    2. Stork Silver badge

      Re: When the developer...

      - but still nothing major (and certainly nothing looking like a back door) was found during the review? Is the review faked too? Where's my tinfoil, need a hat ...

    3. asdf

      Re: When the developer...

      especially when for many use cases you can just use GPG which is also open source still maintained and according to Snowden still safe. On the other hand on a side rant Android whole phone encryption is total garbage. Its slow as hell and is often a total bitch to get to work at all on older handsets (if it works its security is ok I believe as far as is known).

    4. Anonymous Coward
      Anonymous Coward

      Re: When the developer...

      I still have 7.1a installed, which was reasonable. This is the benefit of NOT automatically upgrading..

  3. x 7

    so which other distribution portals were hacked?

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like