Wikileaks yesterday published its latest round of allegedly leaked CIA documents, detailing aspects of the U.S. agency's "Cherry Blossom" firmware modification program, which uses modified versions of router firmware to turn networking devices into surveillance tools.
The document is the latest in WikiLeaks' "Vault 7" series of publications on CIA hacking methods. Previous leaks have detailed the agency's targeting of iOS devices and Macs, while this manual relates specifically to network routers: Once installed, the Cherry Blossom program can be used to monitor internet traffic, crawl for passwords, and redirect the target user to a particular website.
/article-new/2017/03/wikileaks_cia.jpg?lossy)
The manual also describes how CIA agents might install the modified firmware. "In typical operation, a wireless device of interest is implanted with Cherry Blossom firmware, either using the Claymore tool or via a supply chain operation." While documents have not been made public that detail the "Claymore" tool, the latter tactic refers to the practice of intercepting the target device somewhere between the factory and the end user.
The document lists several network products as susceptible to its hacking protocol, including devices from Asus, Belkin, Buffalo, Dell, DLink, Linksys, Motorola, Netgear, Senao, and US Robotics. Apple's AirPort networking equipment does not appear on the list, however.
The CIA has struggled to penetrate Apple's network router hardware in the past due to a combination of the company's robust encryption and its use of proprietary hardware. Previous Harpy Eagle documents published by Wikileaks show apparently unsuccessful efforts to "gain root access on an Apple Airport Extreme and Time Capsule via local and/or remote means to install a persistent rootkit into the flash storage of the devices".
The Cherry Blossom document dates to 2012, so it's likely CIA methods have moved on in an effort to keep up to date with changing networking hardware. In a response the same day that the iOS device hacking efforts came out, Apple said that many of the vulnerabilities in that leak were already patched. Apple reportedly ceased development of its AirPort networking devices last year.
Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our Politics, Religion, Social Issues forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.
Top Rated Comments
Why is the government doing this? I guess I want to know: is it still okay for me to say in front of Echo Dot or write in my emails that President Trump looks like he's wearing an orange ferret on his head? Or am I living in Communist China now?
The funny truth is that many of the things the US warned its population about during the Cold War whilst reminding people that the superior West is free and ripe of opportunities are now - or have been for a very long time - part of their own toolkit and that of many other nations who are "friends" of the US, the West or simply try to strike good trade deals with us.If you like liberty and privacy the times are rough.
Glassed Silver:ios
Making it harder and harder for the private info to be tapped into. Gotta love Apple for this.
No. Like I posted above, there are credible reports that Apple is already dropping its (AirPort) router business. That means that in the future, all Apple servers and networks will have to rely on routers made by those other companies like Dell, Cisco, Belkin, Linksys, etc.So what's the best router for privacy?
The Google-Facebook router is best!Just kidding. :p
The CIA has struggled to penetrate Apple's network router hardware in the past due to a combination of the company's robust encryption and its use of proprietary hardware.
Oh boy…. I'm vindicated in another thread where I opined that Apple abandoning its AirPort routers is a mistake.It's right here, post #34.
https://forums.macrumors.com/threads/eero-reveals-2nd-gen-router-wi-fi-extending-beacon-internet-security-service-and-ios-app-update.2050788/page-2#post-24686814