WikiLeaks Releases Alleged Documents on CIA Hacking

WikiLeaks Releases Alleged Documents on CIA Hacking

WikiLeaks released thousands of documents that it said described the sophisticated software tools the Central Intelligence Agency uses to break into smartphones, computers and even internet-connected televisions, on Tuesday March 7.

The documents, which have not been confirmed as authentic to the CIA, include 7,818 web pages with 942 attachments, WikiLeaks said. The group has named the collection of released documents, “Vault 7.”

The source of the documents was not named, although it did say that Vault 7 had been “circulated among former U.S. government hackers and contractors in an unauthorized manner, one of whom has provided WikiLeaks with portions of the archive.”

The documents are dated from 2013 to 2016 and WikiLeaks has described them as “the largest ever publication of confidential documents on the agency.”

On Tuesday, a former intelligence officer who reviewed the documents said some of the code names for CIA programs, an organization chart and the description of a CIA hacking base seemed to be genuine.

Information released in these documents hint that CIA agents and allied intelligence services have been able to bypass encryption on popular phone and messaging services such as Signal, WhatsApp and Telegram.

In addition to the encryption hack, the documents also talk of a program code-named, “Weeping Angel” which uses a Samsung smart TV as covert listening devices. According to the WikiLeaks documents, even when the TV appears to be turned off, it is still on and listening to the conversations around it to send to CIA servers. The release said this program was created in cooperation with British intelligence.

Another program detailed in the documents is Umbrage, a voluminous library of cyberattack techniques that the CIA has collected from malware produced by other countries. Based on the leaked documents, CIA agents are able to mask the origin of some of its cyberattacks and confuse forensic investigators.

If proven to be authentic, the Vault 7 archive will fall into the same category as the biggest leaks of classified information in recent years, including the quarter million diplomatic cables taken by Chelsea Manning, the former Amry intelligence anyalyst and given to WikiLeaks in 2010, and the hundreds of thousands of documents taken from the National Security Agency by Edward Snowden and given to journalists in 2013.

Featured

  • 2024 Security Today New Product of the Year Award Winners Announced

    More than 20 companies are being recognized this year for products that help keep us safe. Read Now

  • It Always Rains in Florida

    Over the years, and many trips to various cities, I have experienced some of the craziest memorable things. One thing I always count on when going to Orlando is a massive rainstorm after the tradeshow has concluded the first day. Count on it, it is going to rain Monday evening. Expect that it will be a gully washer. Read Now

    • Industry Events
  • Live from GSX 2024 Preview

    It’s hard to believe, but GSX 2024 is almost here. This year’s show runs from Monday, September 23 to Wednesday, September 25 at the Orange County Convention Center in Orlando, Fla. The Campus Security Today and Security Today staff will be on hand to provide live updates about the security industry’s latest innovations, trends, and products. Whether you’re attending the show or keeping tabs on it from afar, we’ve got you covered. Make sure to follow the Live from GSX page for photos, videos, interviews, product demonstrations, announcements, commentary, and more from the heart of the show floor! Read Now

    • Industry Events
  • Elevate Your Business

    In today’s dynamic business environment, companies specializing in physical security are constantly evolving to remain competitive. One strategic shift these businesses can make to give them the advantage is a full or partial transition to a recurring revenue model, popularly called a subscription service. This approach will bring numerous benefits that not only enhance business stability but also improve customer relationships and drive innovation. Recurring monthly revenue (RMR) or recurring annual revenue (RAR) are two recurring cadence choices that work simply and effectively. Read Now

Featured Cybersecurity

Webinars

New Products

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities 3

  • Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation.

    Connect ONE®

    Connect ONE’s powerful cloud-hosted management platform provides the means to tailor lockdowns and emergency mass notifications throughout a facility – while simultaneously alerting occupants to hazards or next steps, like evacuation. 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3