NY Times blames Symantec not preventing Chinese hack (They say its NYT fault)

[menotu]

By Stewart Mitchell - 31 Jan 2013 - pcpro

Security company Symantec has blamed The New York Times for not installing and configuring its software properly after Chinese hackers infiltrated the paper's computer systems.

The accusation follows a rare public disclosure from a hacked company, with The Times pointing the finger at Symantec for not spotting the attack from Chinese hackers that obtained editorial passwords.
In an in-depth review of the hack, how it took place and the fall out, The Times took the unusual step of naming its security supplier, and made no bones about the lack of effectiveness of the suite it had deployed.

"Over the course of three months, attackers installed 45 pieces of custom malware," the paper said. "The Times — which uses antivirus products made by Symantec — found only one instance in which Symantec identified an attacker’s software as malicious and quarantined it, according to Mandiant, [the company used to clean up and investigate the hack]."

The revelation drew a quick response from Symantec, which appeared to claim The Times hadn't turned on all the options available in the software.

http://www.pcpro.co.uk/news/security/379627/symantec-denies-blame-in-new-york-times-hack

The New York Times
https://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html?pagewanted=1&_r=2

https://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html?pagewanted=3&_r=2