How we found the file that was used to Hack RSA
> So, was this an Advanced attack? The email wasn't advanced. The backdoor they dropped wasn't advanced. But he exploit was advanced. And the ultimate target of the attacker was advanced. If somebody hacks a security vendor just to gain access to their customers systems, we'd say the attack is advanced, even if some of the interim steps weren't very complicated.<p>The whole post read to me as "meh. We haz hack for months. not impressed".<p>But they neglected to mention the most sophisticated hacks of the whole incident:<p>1. cracked the vault/SCM of where the SecrueID token generation algo (generates a pseudo-random number) is stored<p>2. reverse engineered the SecureId token (ok, not that hard as apparently  the crypto allowed regeneration the seed and associated token but still more sophisticated then a Excel/flash exploit)<p>The whole Excel/Flash exploit was just to get through the patio screen door (equates to the same access an employee has). What was more serious and not mentioned was the attackers cracked the safe in the house.