Live data from Hacker News

Copies of malware used by intelligence agencies to spy on journalists

wikileaks.org

11–20 of 80 posts

Re: Copies of malware used by intelligence agencies to spy on journalists

#11

Interesting note on Mongolia on the bottom. Also good to see that, at least for a time, Gmail was able to detect infected files (see the Mongolian feedback numbers 10-12) https://wikileaks.org/spyfiles4/database.html#feedback

Hmm, I'm not sure if that's Gmail detecting an infected file. I'm pretty sure Gmail just blocks .exe and .bat files altogether (even in .zip archives).

https://support.google.com/mail/answer/6590?hl=en

Re: Copies of malware used by intelligence agencies to spy on journalists

#12

"Handle with care." Hey guys, let's unzip this so the next guy can run it and spread the worlds most advanced malware on our home network.

I doubt its advanced, their customer list doesn't include well established players like China, Russia and the USA. In fact, this might be the cheapest militarized malware you can get. The only way to go cheaper is to use a TeamViewer RAT.

Re: Copies of malware used by intelligence agencies to spy on journalists

#13
post #11

Interesting note on Mongolia on the bottom. Also good to see that, at least for a time, Gmail was able to detect infected files (see the Mongolian feedback numbers 10-12) https://wikileaks.org/spyfiles4/database.html#feedback

Hmm, I'm not sure if that's Gmail detecting an infected file. I'm pretty sure Gmail just blocks .exe and .bat files altogether (even in .zip archives). https://support.google.com/mail/answer/6590?hl=en

The file in question was a PDF - can it detect that?

Re: Copies of malware used by intelligence agencies to spy on journalists

#14

"Handle with care." Hey guys, let's unzip this so the next guy can run it and spread the worlds most advanced malware on our home network.

I doubt its advanced, their customer list doesn't include well established players like China, Russia and the USA. In fact, this might be the cheapest militarized malware you can get. The only way to go cheaper is to use a TeamViewer RAT.

It might not be the most advanced out there, but I wouldn't belittle the surveillance ability of countries like Pakistan, Qatar, Bahrain, and South Africa.

Surprised to see Italy on there, though.

https://wikileaks.org/spyfiles4/customers.html

Re: Copies of malware used by intelligence agencies to spy on journalists

#16
post #7

Earlier quoted context omitted.

It would be fun to install in a VM though! Or maybe not.

It will phone home. Don't do it unless it's disconnected from the network. It might also try to spread the infection through other attack vectors, like bluetooth, or trying to break out of the VM.

> break out of the VM

I wonder if this has happened yet?

Re: Copies of malware used by intelligence agencies to spy on journalists

#19
So, it seems the NSW police here in Australia are a customer and use this.

Ignore for a moment whether it's a good or bad thing that police use tools like these. What I want to know is, what happens once they "get their guy", so to speak.

Does the malware stay on that computer forever, violating the privacy of family members, or other users of the computer should it be sold on and not wiped correctly? What happens if it's not the correct person?

Basically, why are the police spying? To me, that raises some ethical questions and makes me feel that the police will handle things like this in a very ham-fisted way, like they usually do with technology. Worrying.

Post reply on HN