That would be extremely surprising, given the number and severity of federal crimes involved.
reply(I also dare say: many of these attackers demonstrate a better in-depth understanding of packaging ecosystems than supply chain security vendors do.)
the federal crimes part is irrelevant if its below the threshold of federal authorities actually cracking down on them and figuring out entire chain.
replyjust because credit card theft and other types of scam are illegal
I remember how ddos attackers created "DDOS protection" companies to protect their victims against DDOS.
I don’t think the impact of these recent malware campaigns is below the threshold for federal interest.
reply