Google starts warning users of state-sponsored computer attacks

[nsane.forums]

Users targeted by government-involved campaigns may see advisory banners.

Google unveiled a service that automatically displays a warning to users who may be the target of state-sponsored phishing or malware attacks.

Company representatives aren't saying precisely what criteria is used to determine when a particular attack is sponsored by a government actor, because that information could be used to evade detection. They went on to say very generally that the company relies on "detailed analysis" and victim reports that "strongly suggest the involvement of states or groups that are state-sponsored."

The warning comes in the form of a red banner just above the Google search bar that reads: "Warning: we believe state-sponsored attackers may be attempting to compromise your account or computer." It includes a link to information users can use to help lock down their computers, smartphones and Google accounts.

The warnings are being rolled out after Google users have been hit by several high-profile attacks that show evidence of being sponsored by governments in China and Iran. In early 2010, for instance, the Web giant said it was the victim of a "highly sophisticated and targeted attack" that originated in China and stole information about human rights activists who used the company's Gmail service. Last June, Google said it detected a targeted campaign to collect hundreds of personal Gmail passwords belonging to senior US government officials. And in August, a fraudulent secure sockets layer certificate for the Google domain was discovered. Later analysis revealed that it was used to spy on more than 300,000 users, most of whom were located in Iran.

"We believe it is our duty to be proactive in notifying users about attacks or potential attacks so that they can take action to protect their information," Google Vice President of Security Engineering Eric Grosse wrote in a blog post published Tuesday. "And we will continue to update these notifications based on the latest information."

The new advisories augment warnings the site already provides users when their accounts show unusual activity, such as logins from foreign countries.

View: Original Article

[visualbuffs]

Google warns users of state-sponsored attacks

Google announced Tuesday on its Online Security Blog that it will now display a warning message to users that Google believes may be the target of "state-sponsored attacks."

Image Credit: Google Online Security Blog

The warning message, as seen in the above example image, will only appear to a subset of users if the company believes the account is being compromised by a state or state-sponsored group. The message will encourage the users to take immediate steps to add security to the account.

The blog post, written by Eric Grosse, VP of Security Engineering, did not go into details about how Google determines that a user account is under attack. Grosse mentions that the company might receive "specific intelligence" either directly from users or from Google's monitoring efforts, after which the account will display the clear warning signs and add extra roadblocks in an attempt to thwart the attackers.

The post also did not go into detail about how Google knows that the particular types of activity in these cases are state-sponsored, because the details of Google's information could assist the attackers in future attempts. Google claims its detailed analysis and victim reports "strongly suggest the involvement of states or groups that are state-sponsored."

Though Google did not name any particular states or groups, this additional security measure follows several high-profile attacks with evidence that linked back to governments in China and Iran.

Source: Google Online Security Blog

[Ambrocious]

So basically, Google is letting us know that we are being targeted but NOT telling us how to "evade" which means PROTECT ourselves? Gee thank you Google!

How might Google know that we are targets of attack from the Government? Google ultimately is a mouth piece of the Government when it needs to be. This is simply a method to let some people know that they are victims without hope of self defense.

[Alanon]

So basically, Google is letting us know that we are being targeted but NOT telling us how to "evade" which means PROTECT ourselves? Gee thank you Google!

How might Google know that we are targets of attack from the Government? Google ultimately is a mouth piece of the Government when it needs to be. This is simply a method to let some people know that they are victims without hope of self defense.

It's also a power ploy. Google is powerful enough to detect it, and it wants everyone to know so. The end-user doesn't matter. Google is one of the greatest multinational corporations. They are the internet. It takes only a little nudge from them to set trends and to spark off huge moneymaking opportunities. People usually don't realise this. Google is, I think, sending a message - it's got juice. Hell, they're fending off viruses on their own. How long before they launch their own internet suite? :think:

[dcs18]

Google unveiled a service that automatically displays a warning to users who may be the target of state-sponsored phishing or malware attacks.

Fantastic!!!

Now, if someone can unveil a service to save Users who may be the target of Google-sponsored attacks. :sneaky:

[Alanon]

That'll never happen. Noone can afford to lose Googles sponsoring. XD

[Ambrocious]

One must ask why Google is allowed to be so powerful. Naturally, unless a company has approval from the military industrial complex and the elite, they can't do anything that reaches THIS far. Now, if Google is this powerful, it is also logic that says they are probably hooked right into the NSA, a part of the system of corruption. Google is a double edge sword of good and evil.

In-Q-Tel, the very same company that is responsible for funding the CIA and making sure that it has the latest and greatest technology, it also funds Google.

[Alanon]

I think it's the technique they stole from the Russians. The sleeper agent. It grows larger and more influential with a benign look so that if ever need be it could arm itself and bring the internet down. I don't think that a hacker of today or any single entity on the Web can do more harm than Google. It may be outmatched on resources, but it has the advantage of homeground. Simply noone is more present on the Web more than Google. It was done so on purpose. Just imagine the potential propaganda benefits of placing fake news or favouring articles - it is the single most quiet tool for mass public opinion forming. As such, it is one of the most dangerous of weapons. And it's obviusly been done so on purpose.

[grouchysmurf]

One must ask why Google is allowed to be so powerful. Naturally, unless a company has approval from the military industrial complex and the elite, they can't do anything that reaches THIS far. Now, if Google is this powerful, it is also logic that says they are probably hooked right into the NSA, a part of the system of corruption. Google is a double edge sword of good and evil.

In-Q-Tel, the very same company that is responsible for funding the CIA and making sure that it has the latest and greatest technology, it also funds Google.

So, tell me something...who funds Facebook? If you really want to talk power, Facebook has an arsenal of information.

I stopped using that leech more than 2 years ago, and I still cannot get me old account wiped.

Google keeps track of your habits, hell, it logs your activity and will even email you a report if you set it up.

[Bizarre™]

Google is, I think, sending a message - it's got juice. Hell, they're fending off viruses on their own. How long before they launch their own internet suite? :think:

How long until they become Skynet :uhoh:

[DKT27]

A bit off topic but none the less. Google was rumoured to secretly working on a AV. Just as you know, Chrome browser was secretly being made for 2 years before Google confirmed it.

[Tweety.Abd]

I have no issues with Google, they provide good services.