CIA malware and hacking tools • Hacker News Board

Re: CIA malware and hacking tools

#11

Post by dvcc » Tue, Mar 07, 2017, 1:36 PM UTC

alva wrote: post #6

VLC 2.1.5 compromised https://wikileaks.org/ciav7p1/cms/page_15729066.html edit: please see response below from remlov edit: this post was premature, see below posts

> The asset has the ability to plug in a personal thumbdrive to the network.

Sounds like it just patches a local copy of VLC by running an installer. I don't know if I would consider that compromised.

Re: CIA malware and hacking tools

#12

Post by aeleos » Tue, Mar 07, 2017, 1:37 PM UTC

Wow this is really big. There are tons of documents about the various tools they use, but it seems the majority of the actual source code is still being reviewed and the links just show a link to the file list. I hope they eventually release the source code, as a lot of these tools seem very interesting. I can imagine that many at the CIA are running around on fire, as this seems like a big problem for them.

Re: CIA malware and hacking tools

#13

Post by danyim » Tue, Mar 07, 2017, 1:37 PM UTC

I wonder how many of the exploits/tools released are still usable today.

Also, the actual video press release had to be rescheduled due to their video stream being attacked.[0]

"NOTICE: As Mr. Assange's Perscipe+Facebook video stream links are under attack his video press conference will be rescheduled."

[0]: https://twitter.com/wikileaks/status/839104886625157120

Re: CIA malware and hacking tools

#14

Post by pottersbasilisk » Tue, Mar 07, 2017, 1:37 PM UTC

Unbelievable the depth and scope. Absolutely frightening that most of these tools are out in the wild.

Re: CIA malware and hacking tools

#15

Post by tyingq » Tue, Mar 07, 2017, 1:38 PM UTC

dvcc wrote: post #5

Based on the overview alone (of course I can't read the entire report that fast!), this is exactly what I expect a spy agency would be doing -- if they were not then I would be disappointed. What exactly in the admittedly shortened list am I supposed to be upset about? It makes no distinction between US citizens and overseas parties. If these actions are being done domestically against US citizens, with no just cause…

One cause for concern is that the CIA appears to not only have lost control of the documentation, but of the tools themselves:

"Recently, the CIA lost control of the majority of its hacking arsenal...and associated documentation. This extraordinary collection...gives its possessor the entire hacking capacity of the CIA."

So, now, you get to worry about anybody else that might have this toolset. (Not withstanding your note that some of it might have already been available)

Re: CIA malware and hacking tools

#16

Post by dovdovdov » Tue, Mar 07, 2017, 1:39 PM UTC

sschueller wrote: post #2

I hope Europe and Germany especially finally wake up and start kicking out these pests. The US/CIA is conducting crimes against humanity on foreign soil. Like the drone war. The US may not be part of the international court but Germany is.

Don't get a false impression, everyone is hacking everybody.

Some are just better at hiding it.

Re: CIA malware and hacking tools

#17

Post by ttctciyf » Tue, Mar 07, 2017, 1:39 PM UTC

They have vim editing tips https://wikileaks.org/ciav7p1/cms/page_3375350.html

No emacs?

Re: CIA malware and hacking tools

#18

Post by tinus_hn » Tue, Mar 07, 2017, 1:41 PM UTC

alva wrote: post #6

VLC 2.1.5 compromised https://wikileaks.org/ciav7p1/cms/page_15729066.html edit: please see response below from remlov edit: this post was premature, see below posts

It's a version of VLC that, in addition to the things it normally does, collects information. The operator, who knowingly runs the software, can then collect the information and turn it over to someone else.

Re: CIA malware and hacking tools

#19

Post by megous » Tue, Mar 07, 2017, 1:41 PM UTC

I guess some responsible disclosure to the affected vendors would be nice. If the tools are being actively exploiting bugs, which they are, there's not much else to do in order to stop the exploitation. Give it a few weeks and then publish them in the wild.

Re: CIA malware and hacking tools

#20

Post by rosalinekarr » Tue, Mar 07, 2017, 1:41 PM UTC

This idea that the government should somehow be exempt from proper cybersecurity ethics is disgusting. When the CIA or the NSA find zero day attacks in software, they should report them immediately to be fixed, not build tools specifically to exploit them. It's only a matter of time before these attacks either leak or are rediscovered by other malicious parties. The government is effectively turning their own people into cannon fodder for their ridiculous "cyberwar."