Tag Archives: Government’s

Finfisher Spyware Use By Governments Expanding, Masquerades as Firefox

nk497 writes “Mozilla has sent a cease-and-desist order to Gamma International, after it was revealed the controversial creator of spyware for governments was disguising itself as Firefox on PCs. ‘We cannot abide a software company using our name to disguise online surveillance tools that can be — and in several cases actually have been — used by Gamma’s customers to violate citizens’ human rights and online privacy,’ Mozilla said.” DavidGilbert99 writes on the wider implications of the Citizen Lab report: “Governmental spying software has been in the news a lot in recent months and today Citizen Lab has revealed its latest findings, showing that one of the most prolific tools in use, Finfisher, is now in use in 36 countries around the world [beware the auto playing video ads with sound].” And, Voulnet adds “According to analysis and report by CitizenLab of the Gamma FinFisher trojan spyware used against dissidents in the middle east and around the world, the FinFisher codebase uses the LGPL GNU Multiple Precision Arithmetic Library, possibly without adhering to its distribution restrictions.”

Read more of this story at Slashdot.




Slashdot

‘Old School’ Hackers Attack European Governments Using ‘MiniDuke’ Malware

puddingebola writes “The Guardian reports that hackers have been targeting officials from over 20 European governments with a new piece of malware called ‘MiniDuke.’ ‘The cybersecurity firm Kaspersky Lab, which discovered MiniDuke, said the attackers had servers based in Panama and Turkey – but an examination of the code revealed no further clues about its origin (PDF). Goverments targeted include those of Ireland, Romania, Portugal, Belgium and the Czech Republic. The malware also compromised the computers of a prominent research foundation in Hungary, two thinktanks, and an unnamed healthcare provider in the US.’ Eugene Kaspersky says it’s an unusual piece of malware because it’s reminiscent of attacks from two decades ago. ‘I remember this style of malicious programming from the end of the 1990s and the beginning of the 2000s. I wonder if these types of malware writers, who have been in hibernation for more than a decade, have suddenly awoken and joined the sophisticated group of threat actors active in the cyber world.’ The computers were corrupted through an Adobe PDF attachment to an email.”

Read more of this story at Slashdot.




Slashdot

Raytheon’s Riot could make online stalking more efficient for governments (video)

Raytheon's Riot could make online stalking more efficient for governments (video)

When Raytheon isn’t busy building a railgun or tinkering with exoskeletons, it apparently spends some time coding software to help keep tabs on what folks are doing online. The Guardian got ahold of a video from 2010 that reveals a Raytheon employee demoing such software with the moniker Rapid Information Overlay Technology, or Riot for short. Instead of sifting through streams of tweets and Foursquare checkins to figure out a person’s haunts and schedule, Riot collates data for users and displays it in everything from maps (saved in .kml files) and charts. Riot is even savvy enough to pull out location information saved in the exif data of photos posted online. One visualization feature in the program arranges a target’s info in a spider web-like view and highlights connections between them and people they’ve communicated with online.

According to The Guardian, Raytheon shared the Riot tech with the US government and “industry” organizations in 2010 through a research and development initiative that aimed to build a national security system that could analyze “trillions of entities” online. Raytheon says it hasn’t sold the software to any clients, but we think this is a fine reminder that your friends, family and secret admirers may not be the only ones interested in your tweets and check-ins. Head past the jump to catch a video of Riot in action.

Filed under: , ,

Comments

Source: The Guardian

Engadget

Twitter’s New Transparency Report: Governments Still Want Your Data

Nerval’s Lobster writes “All your Tweets are belong to us… with a court order. Twitter’s second transparency report reinforces what many already know: governments want online user data, and to yank select content from the Internet. Twitter’s first two transparency reports cover the entirety of 2012, so there’s not a deep historical record to mine for insight. Nonetheless, that year’s worth of data shows all types of government inquiry—information requests, removal requests, and copyright notices—either on the increase or holding relatively steady. Governments requested user information from Twitter some 1,009 times in the second half of 2012, up slightly from 849 requests in the first half of that year. Content-removal requests spiked from 6 in the first half of 2012 to 42 in the second. Meanwhile, copyright notices declined a bit, from 3378 in the first half of 2012 to 3268 in the second.”

Read more of this story at Slashdot.




Slashdot

The U.N. Isn’t Regulating the Internet–but Governments Still Exert Control

A vote on new International Telecommunications Regulations means no change in terms of control over the Internet

Is the U.N. now somehow regulating the Internet now that its International Telecommunications Union—after a two week meeting in Dubai that centered largely on whether it should include the Internet in its telephone-centric regulations—has today declared the existence of a new global telecom treaty?







New on MIT Technology Review

World Governments Object To New gTLDs



hypnosec writes “ICANN is receiving more and more requests for new generic top level domains, and governments around the world are busy registering their complaints and objections with the proposed names. To date, more than 200 objections have been raised against proposed gTLDs, with Australia leading the pack with over 120 objections. Some of the other countries which are at the forefront of registering their objections include France, Germany and India. US and UK are near the bottom of the list. ICANN’s “early warnings” about national objections to gTLDs serves as formal objections but it doesn’t mean that these domains will never be signed off. There is always room for discussions and mediation that would allow prospective registrants to keep on pursuing their claims. Australia has objected to names such as ‘.baby,’ ‘.app,’ and ‘.beauty’ among other. It has also objected to names such as ‘.sucks’ and ‘.wtf,’ stating that these names have ‘an overtly negative or critical connotation.’”

Read more of this story at Slashdot.




Slashdot

Xtreme RAT cyberespionage targeted U.S., U.K. governments

The hacker group that recently infected Israeli police computers with the Xtreme RAT malware has also targeted government institutions from the U.S., U.K. and other countries, according to researchers from antivirus vendor Trend Micro.
Computerworld News

The U.S. Government’s Growing Appetite for Google Users’ Data

Government and law enforcement demands that Google share user data are growing 25 percent every six months

U.S. government and law enforcement agencies are increasingly asking Google to hand over data on its customers to help with investigations.







New on MIT Technology Review

Stallman On Unity Dash: Canonical Will Have To Give Users’ Data To Governments



Giorgio Maone writes “Ubuntu developer and fellow Mozillian Benjamin Kerensa chatted with various people about the new Amazon Product Results in the Ubuntu 12.10 Unity Dash. Among them, Richard Stallman told him that this feature is bad because:
1. ‘If Canonical gets this data, it will be forced to hand it over to various governments.’; 2. Amazon is bad. Concerned people can disable remote data retrieval for any lens and scopes or, more surgically, use sudo apt-get remove unity-lens-shopping.”

Read more of this story at Slashdot.


Slashdot

How far will tech firms go to help oppressive governments?

Pew Study surveys industry experts to see what they think the future holds for corporations and their relationships with governments and consumers when it comes to Internet repression.
[Read more]
CNET News

Stuxnet virus origin confirmed: USA and Isreali governments

This week it has been confirmed that the computer virus known as Stuxnet which spread accidentally across the global internet in 2010 was created originally by the governments of the United States and Israel to attack Iran’s nuclear facilities. The worm was originally created to sabotage and shake apart Iran’s nuclear program, and was part

Read The Full Story
SlashGear

Leaked Memo Says Apple Provides Backdoor To Governments



Voline writes “In a tweet early this morning, cybersecurity researcher Christopher Soghoian pointed to an internal memo of India’s Military Intelligence that has been liberated by hackers and posted on the Net. The memo suggests that, “in exchange for the Indian market presence” mobile device manufacturers, including RIM, Nokia, and Apple (collectively defined in the document as “RINOA”) have agreed to provide backdoor access on their devices.
The Indian government then “utilized backdoors provided by RINOA” to intercept internal emails of the U.S.-China Economic and Security Review Commission, a U.S. government body with a mandate to monitor, investigate and report to Congress on ‘the national security implications of the bilateral trade and economic relationship’ between the U.S. and China. Manan Kakkar, an Indian blogger for ZDNet, has also picked up the story and writes that it may be the fruits of an earlier hack of Symantec. If Apple is providing governments with a backdoor to iOS, can we assume that they have also done so with Mac OS X?”

Read more of this story at Slashdot.


Slashdot

Behind the Government’s Rules of Cyber War



wiredmikey writes “Deciding when malware becomes a weapon of war that warrants a response in the physical world – for example, a missile – has become a necessary part of the discussion of military doctrine. The Pentagon recently outlined (PDF) its working definition of what constitutes cyber-war and when subsequent military strikes against physical targets may be justified as result. The main issue is attribution of cyber attacks. The Department of Defense is working to develop new ways to trace the physical source of an attack and the capability to identify an attacker using behavior-based algorithms. ‘If a country is going to fire a missile at someone, it better be sure it has the right target,’ said one expert. A widely held misconception in the U.S. government is our offensive capabilities provide defensive advantage by identifying attacker toolkits and methods in foreign networks prior to them hitting our networks. So when do malware and cyber attacks become a weapon or act of war that warrant a real-world military response?”

Read more of this story at Slashdot.


Slashdot

German Government’s Malware Analyzed

First time accepted submitter lennier1 writes “The German hacker group CCC (Chaos Computer Club) has analyzed a piece of malware the German government uses in criminal investigations to spy on a suspect’s computer. I’m sure we’re all surprised that it’s opening security holes for third parties, and violates a related court verdict (and several laws in general).”

Read more of this story at Slashdot.




Slashdot