Stories
Slash Boxes
Comments

SoylentNews is people

Breaking News

Hacking Team Complains That its Leaked Zero-Days Will be Misused

posted by janrinok on Thursday July 09 2015, @08:24PM   Printer-friendly
from the secure-your-site-better? dept.

takyon writes:

Hacking Team has issued a statement confirming that its code and zero-day software vulnerabilities were leaked:

It is now apparent that a major threat exists because of the posting by cyber criminals of HackingTeam proprietary software on the Internet the night of July 6. HackingTeam's investigation has determined that sufficient code was released to permit anyone to deploy the software against any target of their choice.

Before the attack, HackingTeam could control who had access to the technology which was sold exclusively to governments and government agencies. Now, because of the work of criminals, that ability to control who uses the technology has been lost. Terrorists, extortionists and others can deploy this technology at will if they have the technical ability to do so.

Adobe has patched a security bug in flash, and Microsoft is working on a vulnerable kernel driver. Discussed at The Register and Motherboard.

The Intercept has detailed Hacking Team's demonstration to a Bangladesh "death squad," the use of Hacking Team software by the DEA to spy on all Colombian ISPs from the U.S. embassy in Bogota, and more. In one email, CEO David Vincenzetti unwittingly predicts the current fallout while warning employees not to leak the company's secrets: "Imagine this: a leak on WikiLeaks showing YOU explaining the evilest technology on earth! :-)" he wrote. "You will be demonized by our dearest friends the activists, and normal people will point their fingers at you."

Privacy International's Deputy Director Eric King has called the leaks "the equivalents of the Edward Snowden leaks for the surveillance industry." Nevertheless, Hacking Team plans to continue its operations. PhineasFisher, a hacker who penetrated Hacking Team's competitor Gamma International last year and leaked 40 GB of internal data, has claimed responsibility for this hack.

Original Submission

 
This discussion has been archived. No new comments can be posted.
Hacking Team Complains That its Leaked Zero-Days Will be Misused | Log In/Create an Account | Top | 47 comments | Search Discussion
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.

  • (Score: 4, Informative) by Anonymous Coward on Thursday July 09 2015, @09:50PM

    by Anonymous Coward on Thursday July 09 2015, @09:50PM (#207151)

    magnet:?xt=urn:btih:51603bff88e0a1b3bad3962614978929c9d26955&dn=Hacked%20Team&tr=udp%3A%2F%2Fcoppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.me%3A2710%2Fannounce&tr=http%3A%2F%2Fmgtracker.org%3A2710%2Fannounce&tr=http%3A%2F%2Fbt.careland.com.cn%3A6969%2Fannounce&tr=udp%3A%2F%2Fopen.demonii.com%3A1337&tr=udp%3A%2F%2Fexodus.desync.com%3A6969&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969&tr=udp%3A%2F%2Ftracker.pomf.se&tr=udp%3A%2F%2Ftracker.blackunicorn.xyz%3A6969

    the most interesting parts are the sauce code. mmm, sauce.

    Starting Score:    0  points
    Moderation   +4  
       Informative=4, Total=4
    Extra 'Informative' Modifier   0  
    Total Score:   4  

  • (Score: 2) by FatPhil on Thursday July 09 2015, @10:47PM

    by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Thursday July 09 2015, @10:47PM (#207174) Homepage
    Is there an easily viewable (e.g. pastebin) ls -alR of that bundle. I don't want 400GB of sparse files created on my rather small (and thus short of inodes) HD, thank you.
    --
    Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves

    • (Score: 0) by Anonymous Coward on Friday July 10 2015, @12:23AM

      by Anonymous Coward on Friday July 10 2015, @12:23AM (#207202)

      There are bits of it on github and here (and its parent hierarchy): http://ht.transparencytoolkit.org/c.pozzi/Truecrypt%20Volume/Login.txt [transparencytoolkit.org]

      • (Score: 0) by Anonymous Coward on Friday July 10 2015, @12:32AM

        by Anonymous Coward on Friday July 10 2015, @12:32AM (#207207)

        Found this in my history. I think it's the linux specific code, tools, etc.: https://github.com/hackedteam/core-linux [github.com]

      • (Score: 5, Touché) by FatPhil on Friday July 10 2015, @04:26AM

        by FatPhil (863) <{pc-soylent} {at} {asdf.fi}> on Friday July 10 2015, @04:26AM (#207264) Homepage
        "Please turn JavaScript on and reload the page."

        To view a .txt file?!?!? Modern internet, please die.
        --
        Great minds discuss ideas; average minds discuss events; small minds discuss people; the smallest discuss themselves

        • (Score: 2) by bob_super on Friday July 10 2015, @05:48PM

          by bob_super (1357) on Friday July 10 2015, @05:48PM (#207547)

          > [transparencytoolkit.org]

          You wanted transparency, right?

  • (Score: 3, Funny) by Adamsjas on Friday July 10 2015, @12:17AM

    by Adamsjas (4507) on Friday July 10 2015, @12:17AM (#207199)

    And this is all safe to down load on windows right?

    • (Score: 0) by Anonymous Coward on Friday July 10 2015, @06:02AM

      by Anonymous Coward on Friday July 10 2015, @06:02AM (#207284)

      windoze is unsafe at any speed