I work for a high level employer.
Nord never told the truth.
I hope some folks in the field can back me up on containment protocols via PR.
I personally call it the NDA Container
Edit: Nord -> Tesonet:
TorGuard Residential VPN NordVPN CloudVPN ProtonVPN VyprVPN Hotspot Shield UltraVPN ZenMate TunnelBear PrivateVPN
I implore you to look deeper at this as there are quite a few indications. Du Sprechst Asus Deautsche gekannst?
https://www.kuketz-blog.de/android-nordvpn-uebermittelt-e-mail-adresse-an-tracking-anbieter/
Can prob translate that. Essentially Tesonet is involved in HFT and also providing services. Nord does fun things like include 3rdParty software unabated within their own apps and Infrastructure. This is a huge no no. It’s asking for risk.
In regards to the state actors:
What I can tell you is that CVE-2017-12542 was used.
In my circles this was a big deal as we were not used to seeing an ARM firmware spoopy.
https://www.synacktiv.com/en/publications/rce-vulnerability-in-hp-ilo.html
So again NordVPN claimed a web interface was “left open” by a DC Contractor and “one” host was affected.
In legalese this means “we got exploited and we are going to hide behind host without clarifying what we mean by host ( ambiguous legal term )”
Now what was specifically interesting was a fuck ton of shills popped up when Nord disclosed and blamed this all on Dell.
It had zero to do with Dell. Why the blame?
Cuz it was a 8 year old HP exploit.
If you have your salt - State Actors AGGRESSIVELY collect exploits like heart bleed, keep them private, and use them for as long as possible.
I find it hard to believe HP either didn’t know or was cooperating. Firms the size of HP have squads of researchers locally and on contract beating the shit out of these firmwares. Higher the deployment rate the higher the audit as the risk factor is in parity.
I work for a high level employer.
Nord never told the truth.
I hope some folks in the field can back me up on containment protocols via PR.
I personally call it the NDA Container