Monday, December 30, 2013

So the NSA installs malware on any PC - Zeus News

unit TAO exploits vulnerabilities in devices unknown to the builders themselves and intercept deliveries of online purchases to install spyware.

nsa spy

(Click image to view larger)

You must

the German weekly Der Spiegel if the saga of ‘ NSAgate is enriched with a new episode interesting.

Without revealing from where he got the information (although it is known that Spiegel had access to the leaked documents from Snowden), the weekly has revealed some advanced ways in which you insert the NSA spy and computer systems around the world .

According to Spiegel, the various techniques would be fielded by an operating unit of the NSA called TAO (Tailored Access Operations) and the division ANT (Advanced / Network Access Technology).

Spiegel compares the TAO to a team of plumbers, a sort of “emergency” to call when the normal systems fail.

most used systems are those which provide a remote assistance: for example, once they have perhaps the reason methodically paranoid that prevent Windows to send to Microsoft error messages. The NSA (the unit TAO specifically) would in fact be listening and would use these reports to gain information on the computer to be controlled.

Internet Explorer do their part of the patriot: thanks to its bug would allow the Agency to install malware on the target PC.

article in Der Spiegel then speaks of a rich list – approximately 40 pages – of products and techniques used by the ANT to violate all the systems, for the most part these changes to the BIOS through which install spyware, but The catalog also contains vulnerabilities in devices known companies, ready to be exploited. The list includes companies such as Cisco, Huawei, Dell, Juniper, Western Digital, Seagate, Maxtor and Samsung, all committed to deny any involvement in the affair; Cisco in particular was keen to emphasize in its blog that it is not aware of any vulnerability in their products.

The NSA is also interested in submarine cables, in this case those that form the backbone of the Internet: a confidential document announces ‘success in the collection of management information system of submarine cable SEA-Me-We (SMW -4), “, which connects Europe to Africa in the north, heading towards the Persian Gulf and India, and is run by a consortium of companies (including Sparkle Telecom Italy).

Into this case, the Agency would be able to ‘get access to the website management consortium obtaining information that shows the map of the circuits of significant portions of the network’ .

If

then the techniques can be used remotely or fail for some reason you can not put them into practice, the ANT would not refuse an intervention in the field, intercepting deliveries of components ordered online.

Before you reach the recipient, they would make a stop in the laboratories of the NSA where he would receive a free small addition: a device (a hardware component or malware installed) that will allow the Agency to continue its work of monitoring.

Freedom ‘word and’ an inviolable right, but in the forum of Zeus News in force a regulation imposing restrictions and that the user and ‘bound to respect. The moderators reserve the right to delete or modify Comments posted by users, without having to provide any justification. Unregistered users forum also are subject to prior restraint. responsibility ‘ of the comments remains solely with the respective authors. The main advice: always stay on-topic, avoid offensive, vulgar, violent, or that glorify illegality ‘do not include any personal data useless links or spam in general.

No comments:

Post a Comment