Stories
Slash Boxes
Comments

SoylentNews is people

posted by martyb on Tuesday November 14 2017, @06:15PM   Printer-friendly
from the sysadmin-sleep-disruption dept.

Vault 8:

Today, 9 November 2017, WikiLeaks publishes the source code and development logs to Hive, a major component of the CIA infrastructure to control its malware.

Hive solves a critical problem for the malware operators at the CIA. Even the most sophisticated malware implant on a target computer is useless if there is no way for it to communicate with its operators in a secure manner that does not draw attention. Using Hive even if an implant is discovered on a target computer, attributing it to the CIA is difficult by just looking at the communication of the malware with other servers on the internet. Hive provides a covert communications platform for a whole range of CIA malware to send exfiltrated information to CIA servers and to receive new instructions from operators at the CIA.

Hive can serve multiple operations using multiple implants on target computers. Each operation anonymously registers at least one cover domain (e.g. "perfectly-boring-looking-domain.com") for its own use. The server running the domain website is rented from commercial hosting providers as a VPS (virtual private server) and its software is customized according to CIA specifications. These servers are the public-facing side of the CIA back-end infrastructure and act as a relay for HTTP(S) traffic over a VPN connection to a "hidden" CIA server called 'Blot'.

The code shows how the CIA could impersonate Kaspersky Lab:

According to WikiLeaks, CIA used these fake certificates to impersonate existing entities including Kaspersky Lab. "The three examples included in the source code build a fake certificate for the anti-virus company Kaspersky Laboratory, Moscow pretending to be signed by Thawte Premium Server CA, Cape Town. In this way, if the target organization looks at the network traffic coming out of its network, it is likely to misattribute the CIA exfiltration of data to uninvolved entities whose identities have been impersonated," noted WikiLeaks.

Also at The Register (follow-up).


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by Grishnakh on Wednesday November 15 2017, @02:51AM (2 children)

    by Grishnakh (2831) on Wednesday November 15 2017, @02:51AM (#597114)

    You completely ignored the whole bolt-action vs. semi-auto point I made. "Plain old deer rifles" are not semi-auto (esp. if they're "old").

    As for carrying ammo, you're forgetting that actual soldiers generally do a LOT of walking, so an extra several pounds of weight is significant. The weight of the gun itself is significant too (smaller-caliber rifle = lighter-weight rifle), both for carrying and for firing. And actual soldiers don't kill a lot of people: almost all the ammo they expend doesn't hit the target, is used as cover fire, etc. Deer hunters don't have these factors: they don't need much ammo, they carry their rifles on their backs with a sling (they're not exactly worried about being ambushed by deer), they don't really need semi-auto capability (and in fact that means a more complicated gun that's less accurate for distance shots and needs more maintenance).

    The military guns that actually do resemble deer hunters' rifles a lot (and many in fact are derived from them) are the ones that snipers use.

    Hope that cleared things up.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 2) by The Mighty Buzzard on Wednesday November 15 2017, @03:30AM (1 child)

    by The Mighty Buzzard (18) Subscriber Badge <themightybuzzard@proton.me> on Wednesday November 15 2017, @03:30AM (#597125) Homepage Journal

    Depends on your definition of old. Fifty years ago you would have used a semi-auto unless you personally needed the extra accuracy or you just thought bolt-action was sexier.

    Trust me, I didn't forget the weight. Every single unit I was in stuck me with an M-60 within a month of my arrival. We're specifically talking about civilian weapons and ammo needs here though. Carrying five rounds or fifty hunting doesn't make enough of a weight difference to matter; might as well take fifty. Caliber and weight addressed elsewhere.

    --
    My rights don't end where your fear begins.
    • (Score: 3, Insightful) by aristarchus on Thursday November 16 2017, @05:24AM

      by aristarchus (2645) on Thursday November 16 2017, @05:24AM (#597592) Journal

      Carrying five rounds or fifty hunting doesn't make enough of a weight difference to matter; might as well take fifty.

      People like you either give hunters a bad name, or enable mass-murderers. Hunters, unless they are on the long hunt, only need two rounds. One for the shot, another for the Coup d'Grace. Now, you may think hunter needs more, for in case the miss the first shot. Usually, when a hunter misses the first shot, there is no second shot, because the hunter is really no hunter at all. So there it is. Anyone carrying fifty rounds, with or without magazines to carry some fraction of that, needs to be shot down immmediately! Because they are no hunter, they are a mass murder! And you would have known that if you knew their family and the history of domestic abuse and the support for Trump and general anti-social misogynist tendencies that accompanied the accumulation of really pathetic .22 caliber guns (really, what kind of real man shoots anything below .30 cal? Are these High School warriors we are talking about here? Wolverines?) of a high rate of fire, which indicates cowardice and mental instability. If anyone owns a AR-15, in any, and I do mean ANY, of its civilian guises, we need to find that person, lay down a field of suppressive fire, and hope that we can take the poor crazy pathetic coward alive, by only wounding him. Yes, it is always, ALWAYS, a guy. I suggest targeting the left nut. Nothing says "you ought to surrender" more than having your left nut shot off. Unless, it is having your right nut shot off. Either way. Find these crazed violent bastards, before they strike again. Clock is ticking on this week. . . .