Technique
technique:quantum_insert
A traffic-injection technique that races a cloned malicious website against the legitimate site by exploiting access to an intervening router.
A traffic-injection technique that races a cloned malicious website against the legitimate site by exploiting access to an intervening router.
“What Quantum Insert does, is it uses that router to split the request to LinkedIn into two separate requests”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | DEVELOPED_BY | National Security Agency | Explicit | 48 |
| outgoing | USES | Quantum Server | Explicit | 48 |
| outgoing | ASSOCIATED_WITH | man-in-the-middle attack | Explicit | 48 |
| outgoing | ASSOCIATED_WITH | timing attack | Explicit | 48 |
| outgoing | ASSOCIATED_WITH | man-on-the-side attack | Explicit | 48 |
| incoming | INITIAL_ACCESS_VIA | Operation Socialist | Uncertain | 48 |
Operation Socialist INITIAL_ACCESS_VIA Quantum Insert
The episode presents Quantum Insert as the alleged method used to obtain initial access to Belgacom's network.
Uncertain Confidence 88% · Jack Rhysider EP 48 Details
“what they used was a technology that the NSA developed called Quantum Insert”
“the NSA helped the GCHQ conduct these attacks to get the initial access”
Quantum Insert DEVELOPED_BY National Security Agency
Quantum Insert is described as a technology developed by the NSA.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 48 Details
“a technology that the NSA developed called Quantum Insert”
Quantum Insert USES Quantum Server
The Quantum Insert method uses a Quantum Server to respond faster than the legitimate web server.
Explicit Confidence 95% · Jack Rhysider EP 48 Details
“For this to work, they use something called a Quantum Server”
Quantum Insert ASSOCIATED_WITH man-in-the-middle attack
The episode compares Quantum Insert to a man-in-the-middle attack.
Explicit Confidence 97% · Jack Rhysider EP 48 Details
“This is sort of like a man-in-the-middle attack”
Quantum Insert ASSOCIATED_WITH timing attack
Quantum Insert is also characterized as a timing attack because the fake site must respond faster than the real site.
Explicit Confidence 98% · Jack Rhysider EP 48 Details
“but it’s also a timing attack because the fake LinkedIn site has to respond quicker than the real one”
Quantum Insert ASSOCIATED_WITH man-on-the-side attack
The episode notes that some people call this type of traffic injection a man-on-the-side attack.
Explicit Confidence 97% · Jack Rhysider EP 48 Details
“some call it a man-on-the-side attack”