SoylentNews
SoylentNews is people
https://soylentnews.org/

takyon writes:

The Shadow Brokers are back, and they have a treat for you:

"TheShadowBrokers is having special trick or treat for Amerikanskis tonight," said the Monday morning post, which was signed by the same encryption key used in the August posts. "Many missions into your networks is/was coming from these ip addresses." Monday's leak came as former NSA contractor Harold Thomas Martin III remains in federal custody on charges that he hoarded an astounding 50 terabytes of data in his suburban Maryland home. Much of the data included highly classified information such as the names of US intelligence officers and highly sensitive methods behind intelligence operations. Martin came to the attention of investigators looking into the Shadow Brokers' August leak. Anonymous people with knowledge of the investigation say they don't know what connection, if any, Martin has to the group or the leaks.

[...] According to analyses from researchers here and here, Monday's dump contains 352 distinct IP addresses and 306 domain names that purportedly have been hacked by the NSA. The timestamps included in the leak indicate that the servers were targeted between August 22, 2000 and August 18, 2010. The addresses include 32 .edu domains and nine .gov domains. In all, the targets were located in 49 countries, with the top 10 being China, Japan, Korea, Spain, Germany, India, Taiwan, Mexico, Italy, and Russia. Vitali Kremez, a senior intelligence analyst at security firm Flashpoint, also provides useful analysis here. [...] Other purported NSA tools discussed in Monday's dump have names including DEWDROP, INCISION, JACKLADDER, ORANGUTAN, PATCHICILLIN, RETICULUM, SIDETRACK, AND STOCSURGEON. Little is immediately known about the tools, but the specter that they may be implants or exploits belonging to the NSA is understandably generating intrigue in both security and intelligence circles.

Previously:

"The Shadow Brokers" Claim to Have Hacked NSA
NSA 'Shadow Brokers' Hack Shows SpyWar With Kremlin is Turning Hot
Cisco Begins Patching an NSA Exploit Released by the Shadow Brokers
Probe of Leaked U.S. NSA Hacking Tools Examines Operative's 'Mistake'
NSA Contractor Harold Martin III Arrested
NSA Contractor Accused of "Stealing" Terabytes of Information, Charged Under Espionage Act

Original Submission

1. "takyon" - https://soylentnews.org/~takyon/
2. "The Shadow Brokers" - https://en.wikipedia.org/wiki/The_Shadow_Brokers
3. "they have a treat for you" - http://arstechnica.com/security/2016/10/new-leak-may-show-if-you-were-hacked-by-the-nsa/
4. "Monday morning post" - https://medium.com/@shadowbrokerss/message-5-trick-or-treat-e43f946f93e6
5. "hoarded an astounding 50 terabytes of data in his suburban Maryland home" - http://arstechnica.com/tech-policy/2016/10/feds-nsa-contractor-stole-at-least-50tb-worth-of-highly-classified-data/
6. "highly classified information" - http://arstechnica.com/tech-policy/2016/10/alleged-nsa-data-thief-has-numerous-names-of-us-spies-feds-say/
7. "here" - https://www.myhackerhouse.com/hacker-halloween-inside-shadow-brokers-leak/
8. "here" - http://pastebin.com/RK73grmu
9. "here" - https://www.flashpoint-intel.com/shadow-brokers-trick-treat-leak/
10. ""The Shadow Brokers" Claim to Have Hacked NSA" - https://soylentnews.org/article.pl?sid=16/08/15/2251226
11. "NSA 'Shadow Brokers' Hack Shows SpyWar With Kremlin is Turning Hot" - https://soylentnews.org/article.pl?sid=16/08/19/0242221
12. "Cisco Begins Patching an NSA Exploit Released by the Shadow Brokers" - https://soylentnews.org/article.pl?sid=16/08/26/119251
13. "Probe of Leaked U.S. NSA Hacking Tools Examines Operative's 'Mistake'" - https://soylentnews.org/article.pl?sid=16/09/26/0142248
14. "NSA Contractor Harold Martin III Arrested" - https://soylentnews.org/article.pl?sid=16/10/06/0125200
15. "NSA Contractor Accused of "Stealing" Terabytes of Information, Charged Under Espionage Act" - https://soylentnews.org/article.pl?sid=16/10/21/0153231
16. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=16709

printed from SoylentNews, The Shadow Brokers Identify Hundreds of Targets Allegedly Hacked by the NSA on 2024-04-18 14:37:58