
“The malware dropped from the trojanised keygen was a full blown backdoor, which may have allowed third parties access to the user’s machine.” “The user appears to have downloaded and installed pirated software on his machines, as indicated by an illegal Microsoft Office activation key generator,” Kaspersky says. On 4 October 2014, it appears that the contractor turned the antivirus software back on – because he had downloaded and installed some malware while trying to pirate Microsoft Office. Some time after that, the contractor apparently disabled the Kaspersky antivirus software, the company says, but is unable to pinpoint the exact date as that information is not logged. But the timeline it lays out is one of multiple serious security errors on the part of the user, believed to be an NSA contractor.Īccording to Kaspersky’s report, the contractor was using the company’s home antivirus software when it detected a piece of malware attributed to the “Equation Group” (the security firm’s internal codename for what is believed to be the NSA’s hacking team) on 11 September 2014. Kaspersky Lab does not dispute that it discovered hacking tools on the computer of a user of one of its consumer antivirus products.
