SecureWorld News

Winter Olympics IT Company Hacked

Written by SecureWorld News Team | Thu | Feb 15, 2018 | 8:18 PM Z

You've been breached—and you don't know it.

We've all seen various statistics on this, like the number of days or weeks a typical breach goes undetected. Well, now it may have happened to the 2018 Winter Olympics just that way.

Remember the hack that took down the winter games website during the opening ceremony? Looks like it was in the works for awhile.

That's based on a very interesting write-up in CyberScoop about Olympic Games IT provider Atos:

"Hackers armed with destructive malware appear to have compromised the main IT service provider for the Winter Olympic Games months before last week’s highly publicized cyberattack.

Publicly available evidence analyzed by experts and reviewed by CyberScoop suggests that whoever deployed the Olympic Destroyer malware on Feb. 9 likely previously penetrated a series of computer systems around December belonging to Atos, a multinational information technology service provider that is hosting the cloud infrastructure for the Pyeongchang games.

The evidence was recently posted to the VirusTotal repository, but information associated with the malware samples carries indications that the hackers were inside Atos systems since at least December. Some of the earliest samples were uploaded by unnamed VirusTotal users geographically located in France, where Atos is headquartered, and Romania, where some members of Atos’ security team work."

Atos has confirmed it is investigating a possible breach through malware harvested credentials. 

Which is more intriguing: Who will win America's next gold medal, or who hacked the Olympic games and how? That is a tough call.