Matt Jezorek

Brian Krebs recently wrote an article titled Who Else Was Hit by the RSA Attackers? and while it was an interesting read it has a fundamental flaw.

Based only on the article alone we can say that the networks in question have/had malware on the network talking to command and control networks. These networks may have been used in the RSA attack. However one thing that is not known is the tenancy of the command and control networks.

I do not have access to the same data that Krebs does and he has reported he is not at liberty to give the data out so at this point I can only assert that Proving malware is not the same as proving the attacker.

I would be interested in seeing the data and how it was determined that the attacker is the same. I am not concerned about who actually provided the data.