07 Nov 2009
Reports in Der Spiegel suggest that the Israeli air strike against claimed nuclear facilities in Syria were targeted after Mossad successfully hacked a laptop left in a London hotel bedroom.
The report says that in late 2006 a senior Syrian diplomat staying in London left his laptop unattended in a London hotel, giving Mossad the chance to install a Trojan on the computer that allowed communications to be monitored.
On September 6 the next year the Israeli air force carried out a strike on the Syrian Al Kabir complex in the east of the country. Syrian government media gave little details of the attack, other than to say that Israeli aircraft had dropped munitions on an empty portion of the country before being seen off by local air defences.
In 2008, the International Atomic Energy Agency analysed soil at Al Kabir and found it contained uranium elements not included in Syria's nuclear inventory. Sources in Syria suggest the material was dropped by Israeli planes to justify the attack.
Security expert Bruce Schneier highlighted the case in his blog, saying it was similar to an attack carried out in 2009 where an outside party could install malware on a separate bootloader segment on the hard drive so that it would access any files, even if encrypted. He calls it the " evil maid" attack.
“Remember the evil maid attack: if an attacker gets hold of your computer temporarily, he can bypass your encryption software,” he said.
The physical security of laptop computers is an increasingly important issue for those travelling abroad. The US government has warned visitors to China to keep their laptops under constant surveillance while in the country.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Firm also discusses Blackberry 10 system
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Major Global Consultancy currently experiencing a period...
Contract Solutions Designer / Solutions Architect - Investment...
IT Consultant - Financial Services - up to £50'000...
Reference Data Pre-Sales - London - £50'000 - £80'000...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
Evil Maid bypassing ecryption software
There are many weaknesses in software based encryption of hard disks. The "Evil Maid" is just one of them. The only secure solution is a self enrypting drive as specified by the Trusted Computing Group. In these drive encryption is built into the drive hardware itself. These self encrypting drives (SED) are available today from OEMs like DELL, Futjitsu etc.
Posted by: PGerber 08 Nov 2009