"Over the last 16 months, as I've debated this issue around the world, every single time somebody has said to me, "I don't really worry about invasions of privacy because I don't have anything to hide." I always say the same thing to them. I get out a pen, I write down my email address. I say, "Here's my email address. What I want you to do when you get home is email me the passwords to all of your email accounts, not just the nice, respectable work one in your name, but all of them, because I want to be able to just troll through what it is you're doing online, read what I want to read and publish whatever I find interesting. After all, if you're not a bad person, if you're doing nothing wrong, you should have nothing to hide." Not a single person has taken me up on that offer."

— Glenn Greenwald in Why privacy matters - TED Talk

Hi all,

Just saw that Notepad++ released an update following the leaks. Has anyone put together a list of all the affected software that needs to be updated with links? Would be amazing if we could make such a list all together!

The CIA leaks just happened a few days ago, so...?

Firstly ensure that every single trace of who produced your code is removed.

https://www.wikileaks.org/ciav7p1/cms/page_14587677.html

Or nick someone else's code and modify it, so it looks like they did it.

https://www.wikileaks.org/ciav7p1/cms/page_14587109.html

Then make sure that your whole network doesn't get hacked.

They must be so pissed.

From running through about 5% of the dump (which is 1% of all of the data apparently) have come across these projects.

The scale and sophistication of the CIA's work on this is astonishing. It makes you realize why people are using air-blocked computers booting Tails.

Fight Club - Infection by thumb drive

HammerDrill - Modifying burnt cd's

Basic Bit - Keyloggers

Copperfield - (the OG implant for Linux)

Hive - Custom implant supporting network redirection through operational infrastructure

Gyrfalcon - Ptraces an OpenSSH client collecting username, password, TCP/IP connections, and session data

SnowyOwl - Inject code into OpenSSH client process creating surreptitious sub-channel to remote target

Sparrowhawk - Software tool to support keystroke logging

Bee Sting - Proxy with iFrame injection - HTTP proxy with man-in-the-middle iFrame injection using TCP sockets in C.

MaddeningWhispers - Software components that provide beaconing and remote access to a Vanguard device

sontaran - VOIP - The phone temporarily allows SSH access to the admin user via the web interface

YarnBall - Covert USB storage

Weeping Angel - Samsung F Series (2013 Model) SmartTV Implant

HarpyEagle - Apple Airport Extreme and Time Capsule Implant

DerStarke - Apple EFI/UEFI Boot Implant

QuarkMatter - Apple EFI/UEFI Boot Implant

BaldEagle - Exploits a vulnerability within the Hardware Abstraction Layer (HAL) daemon

ShoulderSurfer - a tool that can extract data from an Exchange Database (versions 1.0 & 1.1 targeting Exchange 2010).

Frog Prince - Unix - command and control

Magical Mutt - Windows, Injects Dll From Memory Into A Remote Process

Melomy DriveIn - uses a DLL hijack in VLC player that once launched will drop and run RickyBobby

Flash Bang - a tool designed to be able to migrate from a browser process (using sandbox breakout), escalate privileges, and memory load a NOD Persistence Spec dll

RickyBobby - enables COG operators to upload and download files and execute commands and executables on the target computer without detection as malicious software by personal security products (PSPs)

RainMaker - a survey and file collection tool

Internet Explorer Password Collection - steals passwords 'saved' by Internet Explorer

DarkComet - webcam capture

When are the next leaks coming? If this really is only 1%?

I'm falling down the rabbit hole here, so take a ride with me if you want.

Whoever got the licenses for 010 appears to have worked for Computer Security Solutions, or know of them. Will leave it to you to connect that dot. From there:

Computer Security Solutions, Inc., doing business as CompSec, provides information technology solutions to government customers and technology vendors. It offers product support, custom engineered, technology research and test, and acquisition and procurement solutions. The company was incorporated in 1996 and is based in Alexandria, Virginia. As of January 28, 2013, Computer Security Solutions, Inc. operates as a subsidiary of Gladiator HoldCo, LLC.

So what's Gladiator HoldCo LLC?

D.C. Capital Partners.

Link

So it looks like this DC money company owns this DC-area "compsec" company that has ties to the CIA.

Just a string to pull, if anyone wants to see where it goes. Maybe I'm chasing ghosts... or maybe I'm chasing ghosts.

https://www.wikileaks.org/ciav7p1/cms/page_13205587.html

Archon - Remote Architecture Detection

Dyonedo - Codesign Defeat

Earth/Eve - Remote Exploit

Elderpiggy - Sandbox Escape

Ironic - Kernel ASLR Defeat

Nandao - Kernel Exploit

Persistence -Reboot Persistence

Redux - Close Access

Rhino - Kernel ASLR Defeat

Sal - Codesign Defeat

Saline - ROP execution

Wintersky - Kernel ASLR Defeat

Xiphos - Kernel Exploit

WinterSky - kernel exploit?

Moon - kernel exploit?

MiniMe - Latest (kernel exploit?)

ETA: ALSR - https://en.wikipedia.org/wiki/Address_space_layout_randomization