CIA's Windows XP to Windows 10 malware: WikiLeaks reveals Athena

ZDNET ^ | 05/22/17 | Liam Tung

[Enlightened1]

The latest file revealed in WikiLeaks' Vault 7 catalog of CIA hacking toolkit is Athena, a surveillance tool apparently designed to capture communications from Windows XP to Windows 10 machines.

Details of the Athena malware are available in a document allegedly created by the CIA in November 2015. The malware is said to have been made in conjunction with US cybersecurity firm Siege Technologies, which was acquired by Nehemiah Security late last year.

Athena is the ninth Vault 7 release of CIA hacking tools for mobile and desktop systems. WikiLeaks has been revealing one tool at the end of each week over the past two months.

As noted in the documents, Athena is "a very simple implant application" that offers remote access to the target machine. The malware can be used to deliver a payload so that files can be delivered to and retrieved from a directory of the host.

"The target computer operating systems are Windows XP Pro SP3 32-bit (Athena only), Windows 7 32-bit/64-bit, Windows 8.1 32- bit/64-bit, Windows 2008 Enterprise Server, Windows 2012 Server, and Windows 10," the documents note.

There's a separate implementation of the malware called Hera, or Athena-Bravo, that supports Windows 8 to Windows 10.

Athena, which is also called Athena-Alpha, gains persistence via the Windows RemoteAccess service, while Hera/Athena-Bravo uses the Dnscache service.

The documents outline several ways to deliver the malware including remote installation, the supply chain, via an "asset", or with a tool called Windex detailed in earlier WikiLeaks releases.

[Bob434]

very scary thought megan.

[Bob434]

what the hell? Your government is spying on you and you don’;t think the people have a right to know?

[Attention Surplus Disorder]

I probably stated that wrong. The people have a right to know and it ought not be done. That does not mean that elaborate hacking and penetration techniques for executing covert surveillance should be released in a way that allows true enemies of the state to use those very techniques against the state.