Costin Raiu joins the XZ Utils backdoor investigation
About this episode
Episode sponsors:
- Binarly, the supply chain security experts (https://binarly.io)
- XZ.fail backdoor detector (https://xz.fail)
Malware paleontologist Costin Raiu returns for an emergency episode on the XZ Utils software supply chain backdoor. We dig into the timeline of the attack, the characteristics of the backdoor, affected Linux distributions, and the reasons why 'Tia Jan' is the handiwork of a cunning nation-state.
Based on all the clues available, Costin pinpoints three main suspects -- North Korea's Lazarus, China's APT41 or Russia's APT29 -- and warns that there are more of these backdoors lurking in modern software supply chains.
Get every episode summarized
Each time Three Buddy Problem publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Three Buddy Problem
A Thousand Agents Walk Into Hugging Face
Three Buddy Problem
Inside the EncroChat law-enforcement implant, Irregular's AI sandbox failure
Three Buddy Problem
A tiny 12 KB Windows backdoor, one victim, and a dead domain
Three Buddy Problem
Inside OpenAI's Black Hat Confession
Three Buddy Problem