In the end, we will remember not the words of our enemies, but the silence of our friends. -- Martin Luther King, Jr.

Express-lane the Application that captured all the biometric records from Government services like FBI, CBP, DHS and NSA.


this tools remains persistent and keeps storing the data  until application "ExitRamp" is executed which decrypts the collected data to an external flash drive

Supported formats are
 RTSP/H.264 video streams and can capture the screen  frames as JPG and store them in an output directory

Before the usage, the python file has to be configured with its -output folder for the media to save

 Example: rtsp://10.3.2.1:8854/IPCameraStream
• -vcodec copy o Directs the decoder to “copy” the video data from the stream. For use when collecting video files only.
• -acodec copy o Directs the decoder to “copy” the audio data from the stream. For use when collecting video files only.
• -an o Directs the decoder to ignore audio data from the stream. For use when collecting video files only.
 • -f [output file format] [output path] o The only currently supported options are avi and image2.
The output path should always be “-“ (as in a STDOUT pipe). 

Example argument strings: 

-i rtsp://10.3.2.52:8554/Cam –f image2 – 

-i rtsp://10.3.2.52:8554/Cam –t 300 –vcodec copy –an –f avi –

-i rtsp://10.3.2.52:8554/Cam –t 300 –vcodec copy –acodec copy –f avi 

This malware leaves no trace of spying you.

The reason of being stealthy is the application includes In-Memory Code Execution exploit where the program gets executed directly without being stored in your disk

Documentation release of the CouchPotato v1.0 -- User Guide.

This exploit v1 and 2 is limited to Windows XP



Source WikiLeaks

“Hi to all mankind. The greatest leak of cyber space era is happening. What’s its name? Oh I forget to tell. Its HBO and Game of Thrones……!!!!!! You are lucky to be the first pioneers to witness and download the leak. Enjoy it & spread the words. Whoever spreads well, we will have an interview with him. HBO is falling.”

“We immediately began investigating the incident and are working with law enforcement and outside cybersecurity firms. Data protection is a top priority at HBO, and we take seriously our responsibility to protect the data we hold.”

The Leaks also has the upcoming episodes of Series "Room 104" and "Baller", And this would be the first time Game Of Thrones will be pirated over Torrent sites before the official release in case the leak is legit

UnCensoring your favourite torrent site was fun to unblock but fear it's not anymore for Russians from November



President of Russia Vladimir Putin, Passes a law today against all unblocking routines.

 This helps the people divert their viewpoints from unlawful websites.


Leonid Levin, the Head of the Information Policy of Russia, said  This law wasn't passed  to route the people views but block the access to  sites that are unfavourable to people in Russia 



   

By seeking to perfect Russia’s mechanisms of digital censorship and surveillance, these bills trample on the freedoms guaranteed by the Constitution and the European Convention on Human Rights

Hope this network routing don't create Privacy issue (Intercepting all the traffic of Russia channels and ISP) for the people in Russia and Soviet union

This malware includes three different tools

• Achilles

                  - Cryptor and Binder + reverse connection malware for Mac

• SeaPea    

                - RootKit MAC OS

• Aeries 

                - Targets  Linux kernels


SeaPea:
Rootkit for MacOS
SeaPea has 3Ver
             Normal:

            The rootkit is injected to a normal process and not stealthy.

             Elite-mode:
  
            Which mode is pretty stealth and process is hidden      

             Super-Elite:

            An elite process can also be executed as super elite when the NSA wants to remain covered from your sight and MacOS logs ultimately.
  Drawback of SeaPea was few

In a single user system, SeaPea will fail to run as hidden process
Versions affected: Mac OSX 10.6 and 10.7

USER MANUAL




Aeries :

Aeries binaries were used to  attack the following Linux kernels :

•  Debian Linux 7
•  Red Hat Enterprise Linux 6 (i386)
•  Solaris 11 
•  FreeBSD 8
•  CentOS 5.3 (32-bit edition)
•  CentOS 5.7 (32-bit edition)

Aeries based on C code and needs Python library to start executing commands
It has Task_handler binary of Python to create a payload, and once They are executed, The  user may be a victim to CIA operative agent
NSA can encrypt the data in your  Linux Disk with this payloads
All the reverse communication from Aeries malware to NSA lab were highly encrypted with AES256 encryption





Achilles :

Injects the Backdoor to legit DMG (Disk Image)

DMG is a format similar to ISO in windows  most of the pirated applications for Mac are distributed over torrent via DMG 

How the DMG is infected:

The malicious binary is stored as DMG and binded with a Legit DMG's  creating a backdoor malware Crypted to a legit application. which helped NSA to be in stealth mode

When the user executes the DMG and run the application