Live data from Hacker News

Equation Group Cyber Weapons Auction

theshadowbrokers.tumblr.com

21–30 of 151 posts

Re: Equation Group Cyber Weapons Auction

#21
post #6

Sounds important. What does it all mean?

Equation Group is the name given by AV vendors to a group of attacks thought to be carried out by NSA. This is, apparently, a dump of internal files (mostly exploits and command & control scripts) that someone got ahold of. They're now apparently trying to auction them off. If it's a fake, it's a very good one – the code words match up to things we've seen in the Snowden leaks, e.g. Jetplow ( https://www.schneier.com…

It should be noted that it is only suspected that the Equation Group is related to the NSA. I only bring this up not because I don't think it is but rather to emphasize that it has not been proven yet.

Re: Equation Group Cyber Weapons Auction

#23
post #9

The structure of this auction is amazing! 1. All bids are paid up front, and you never get your money back, even if you aren't the highest bidder. So if people bid $50, $70, and $100, they collect $220. 2. No one can verify what is actualy up for sale before the auction. 3. There is no way for the world to know that they actualy delivered the goods after the auction. 4. There is no way for the highest bidder to know…

This is effectively a "penny auction," which, as you point out, benefits nobody but the auctioneers.

Re: Equation Group Cyber Weapons Auction

#25
post #6

Sounds important. What does it all mean?

Equation Group is the name given by AV vendors to a group of attacks thought to be carried out by NSA. This is, apparently, a dump of internal files (mostly exploits and command & control scripts) that someone got ahold of. They're now apparently trying to auction them off. If it's a fake, it's a very good one – the code words match up to things we've seen in the Snowden leaks, e.g. Jetplow ( https://www.schneier.com…

[deleted]

Re: Equation Group Cyber Weapons Auction

#27
post #12

Earlier quoted context omitted.

>Everything about this auction is lined up to incentivize a scam. Yes, however the contents of the free sample seems very real. Without having dug into the binaries it's hard to tell, but it's hard to imagine someone wrote this to scam 1 million BTC out of the net.

With 1 million BTC on the line, you have a hard time imagining that someone would do this? People do work for a lot less..

Yes.

Re: Equation Group Cyber Weapons Auction

#29
post #6

Earlier quoted context omitted.

Equation Group is the name given by AV vendors to a group of attacks thought to be carried out by NSA. This is, apparently, a dump of internal files (mostly exploits and command & control scripts) that someone got ahold of. They're now apparently trying to auction them off. If it's a fake, it's a very good one – the code words match up to things we've seen in the Snowden leaks, e.g. Jetplow ( https://www.schneier.com…

It should be noted that it is only suspected that the Equation Group is related to the NSA. I only bring this up not because I don't think it is but rather to emphasize that it has not been proven yet.

If this leak is real, it points to one of two things. Either it isn't the NSA and is a company or some quasi-governmental group - owing to the fact that any of this shit the NSA makes would be on JWICS terminals and absolutely not accessible to the internet, or it means there's a leak from the NSA that dumped these files and has decided to sell them. I'd lean more towards the former.

Re: Equation Group Cyber Weapons Auction

#30
post #27

Earlier quoted context omitted.

With 1 million BTC on the line, you have a hard time imagining that someone would do this? People do work for a lot less..

Yes.

Maybe it's the language? Given what I've read this seems real.

However, with that much money on the line (if that figure is correct), you could fake almost anything.

Post reply on HN