Inside Vault 7: A Look At The CIA's Hacking Tools Published by Wikileaks

Inside Vault 7: A Look At The CIA's Hacking Tools Published by Wikileaks

Caezar Sotto

Hacking is a serious threat that aims to dig deep even through a user's most secured data. Recently WikiLeaks shared a few documents coming from the CIA to show how extensive they are.

The recent CIA Vault 7 data dump reveals how the government agency spied on many Mac and iPhone users. Since then, Apple has extensively fixed several iOS security features.

For those interested to know the tools of the trade, you can continue reading below. Here are some excerpts from TechCrunch's original post.

Sonic Screwdriver v1.0

This 2012 hack is quite neat as it uses a peripheral device to infect your Mac. Believe it or not, the CIA was installing the malware on Thunderbolt-to-Ethernet adaptors.

It works after the CIA has flashed the dongle and is easy to execute afterward. Unaware users usually fall into the hack by powering their Mac. The code would automatically execute on the accessory and infect the firmware.

The hack could easily affect multiple Macs with the same device. Don't worry, though, Apple has already fixed this bug back in 2015. Rest assured that it won't be invading your Mac soon, but to be sure, don't buy a Thunderbolt accessory on eBay.

Triton v1.3 & Der Starke v1.4

Triton is quite a scary and powerful malware. Once installed, the CIA can get files and folders from your computer. What's worst is the U.S. agency can install it anywhere as long as they can mount a user's hard drive to their folder.

Der Starke v1.4 in the other hand is an entirely different entity. The diskless malware invaded the Mac back in 2013 and was more of a silent operator.

Mac owners unlikely did not find the malware wreaking havoc on their computers. Even scarier is the fact that it can work with the Sonic Screwdriver in exploiting a user's privacy. So far the best prevention is to install Little Snitch, Little Flocker and BlockBlock for the Mac.

DarkSeaSkies v1.0

This is old exploit was specifically designed to infect the MacBook Air and OS X 10.5. It shares the same function as the Der Starke in effecting Mac's firmware. Once unleashed it can upload any data from a user's computer.

The good things about it are the CIA abandoned the tools in favor of the Der Starke and Triton.

NightSkies v1.2

The only iPhone hacking tool included in the data dump. The old tool was first released in December 2008 to get as much data from iOS 2.1 devices and the iPhone 3G.

The tool can access a user's address book and SMS conversations. The CIA can then execute a command to upload the information to their servers. Luckily this ancient method has already been outdated. The only solution to this hack is by updating a user's iOS to the latest version.

It seems Edward Snowden was right, after all, stay tuned for more.

© Copyright 2020 Mobile & Apps, All rights reserved. Do not reproduce without permission.
Back
Real Time Analytics