Skip to main content

vault 7 - Dark Matter hidden from public eyes and minds






Dark Matter: Hidden from public eyes

 In the second part of vault series by wikileaks it shows documents of CIA in which there are software's which can make you think that is it to use apple devices
Due to popularity of apple devices among common mass as well as political, social, economic, buisnessmen because of its look, security and extra features , CIA take advantage and developed tools for infesting mac with malwares, and trojans.


Sonic Screwdriver :

 It is developed by EDG branch of information operation center in CIA.
If you want to boot from device on mac or OSx it will prompt firmware password which prevents any unknown person to interfere with the device. In a sonic screwdriver document it reveled method by which a person can execute codes from a USB thumbstick, DVD/CD, or external hard drive  while MAC laptop is booting even if it has password on it.
The CIA's "Sonic Screwdriver" infector is stored on the modified firmware of an Apple Thunderbolt-to-Ethernet adapter. 
It is used with other EDG tools such as  DerStarke, trition ,etc

 DerStarke:

 Der Starke is a diskless, EFI-persistent version of Triton, an automated implant. Once active on a target system,the implant executed within diskarbitrationd and typically performs network communicationsthrough a browser process so that PSPs like Little Snitch cannot easily detect it's presence.

DarkSkies:

 DarkSeaSkies is an implant that persists in the EFI firmware of an Apple MacBook Air computer,   installs   a   Mac   OSX 10.5 kernel-space   implant   and   executes   a   user-space implant.DarkSeaSkies consists of three different tools:
1. DarkMatter: An EFI driver that persists in firmware and installs the other two tools.
2. SeaPea: A Mac OSX kernel-space implant that executes, and provides stealth and privilege to user-space implants. 
3. NightSkies: A Mac OSX user-
DarkSeaSkies is installed from a bootable flash drive. 
As to leave no trace darkskies will uninstall on next boot.

 What apple said about these leaks:

 Apple refused these claims and said that iphone vulnerability was removed at the time of iphone 3s


 Reference: wikileaks.org 



Labels:

Comments

Post a Comment

Popular posts from this blog

Vault 7: CIA anti forensic framework Marble

  Wikileaks leaked  third part in series of  Vault 7 yesterday , CIA secret Anti-forensic Marble-framework. Marble is used to confuse and incomprehensible the forensics and anti-virus companies from attributing viruses, trojans and hacking attacks to the CIA. Marble framework does all of this by hiding text in viruse, troajns(or CIA malware) from visual inspection. This is the digital equivallent of a specalized CIA tool to place covers over the english language text on U.S. produced weapons systems before giving them to insurgents secretly backed by the CIA. Marble framework is a very core thing used with CIA malwares to avoid forensic investigations  pointing CIA for it. The Marble source code also includes a deobfuscator to reverse CIA text obfuscation. Combined with the revealed obfuscation techniques, a pattern or signature emerges which can assist forensic investigators attribute previous hacking attacks and viruses to the CIA. Marb...
Post a Comment
Read more