Hacker News Reader

This article is extremely dishonest and should be removed. It offers zero proof this is what lead to the compromise. The leaked credentials were reported over a year ago and patched according to FireEye.

There are already comments here from users who presumably haven't read the article and are parroting this as fact.

View on HN

Agree. Also: "A malicious software class was included among many other legitimate classes and then signed with a legitimate certificate," the Windows maker said. The resulting binary included a backdoor and was then discreetly distributed into targeted organizations." - which means that somehow a signing certificate must have been stolen or reverse engineered. Not simple.

The article has mentioned its purely based on speculation, it doesn't claim - it was the cause. There has to be a bigger chain of attacks that led to the breach.

Reply on news.ycombinator.com