Slashdot Mirror


Symantec Researchers Find 49 New Modules of Regin Spying Tool

itwbennett writes: Security researchers from Symantec have identified 49 more modules (bringing the total number found so far to 75) of the sophisticated Regin cyberespionage platform that many believe is used by the U.S. National Security Agency and its close allies. Some of the modules implement basic malware functions, while other modules are much more specialized and built with specific targets in mind. 'One module was designed to monitor network traffic to Microsoft Internet Information Services (IIS) web servers, another was observed collecting administration traffic for mobile telephony base station controllers, while another was created specifically for parsing mail from Exchange databases,' the Symantec researchers said in an updated version of their white paper (PDF) published Thursday.

23 comments

  1. Dubious by Anonymous Coward · · Score: 1

    Symantec is an American company. If this were really NSA malware, would Symantec be able to tell us about it?

    1. Re:Dubious by Impy+the+Impiuos+Imp · · Score: 2

      No, if you stumble across something, you have freedom of speech and government cannot pre-silence you. Nothing save an imminent D Day type invasion launch would pass the Supreme Court, and they would mean imminent, like 24 hours.

      Government has worked with anti-spyware people to overlook certain things in certain cases, if stories are to be believed, but that is voluntary.

      --
      (-1: Post disagrees with my already-settled worldview) is not a valid mod option.
    2. Re: Dubious by Anonymous Coward · · Score: 1

      Yes, until it's confirmed. Then they have to shut up. Until then it's speculation which is protected free speech.

    3. Re:Dubious by Anonymous Coward · · Score: 0

      How about a national security letter? Wouldn't that have the power to shut them up until they actually finish their court case trying to prove it to be unconstitutional, in which case the laws surounding national security letters are changed very slightly before reaching a conclusion, forcing your case to be dropped because the law you are fighting no longer exists.

  2. Makes no difference by MouseR · · Score: 1, Insightful

    No one in the USA cares about their privacy or their rights, so long as it's not about burning tires or shooting guns.

    No mater how much scandals are thrown to the public, be it NSA related or even fake evidence leading to Iraq fiasco for the benefit of the murderous clan of the Cheney group, from Bush puppet to Rice accessory through 45$/gallon kerosene sold by Halliburton to USA Army corps, hundreds of thousands of civilians ground to a pulp to the blatant misuse of US treasury by lord how many agencies to feed off the public insecurities with TSA leading the front of nosiness, no one cares.

    You can throw more of it. Everybody's senses have been reduced to a gentle numb.

    So, Symantec can keep publishing their finds. They may make a bit more money off of it, and NSA will continue it's game. Unimpeded.

    (wow it's been a long week... I may be frustrated a tad)

    1. Re:Makes no difference by Anonymous Coward · · Score: 1

      No one in the USA cares about their privacy[...]

      Posting from a VPN which I chose (from an assortment that fit the bill) because it keeps no logs, oh--in the U.S. I care, so it's now every American but me. Let's see if we can't make some more forward progress...

    2. Re:Makes no difference by Anonymous Coward · · Score: 0

      I notice how you only target stuff done by the Bush administration....

    3. Re:Makes no difference by Anonymous Coward · · Score: 1

      There are people fighting this. Go move to the free state: https://freestateproject.org/

      Nobody is going to take up arms against the government unless they *absolutely have to* - but to suggest that nobody is organizing or fighting these things is non-sense. The ACLU, the EFF, and even the Free Software Foundation and there contributors actively fight this stuff.

      I'll agree that nobody has formally organized a serious militia, which is every ones right, but they are fighting to uphold these rights. If enough gun nuts move accordingly there might eventually become enough anger in one place to start a more serious fight. Before that can happen there have to be people *in one place* which are organized and of the same view point.

      * I should point out the free state project is a non-violent movement to get 20,000 people to move to the state of New Hampshire and is most of the way there already. Thousands have moved and thousands more are already in New Hampshire. The actual signers though aren't required to move until there are 20,000 people committed to moving. In reality though people are already moving. This is a start to fighting this BS and it doesn't matter if your a republican, a democrat, etc as long as you *want less government* and individual liberties (ie want people to have the right to do as they please short of hurting others, so smoke pot a-ok, own guns a-ok, sell stuff without a license a-ok, etc).

    4. Re:Makes no difference by MouseR · · Score: 1, Flamebait

      Kinda liked Reagan. He managed to beat out USSR through a well crafted arms race to drive it down financially. Cost the US a lot, but no blood was shed and the USSR broke up.
      Bush senior was OK. Gulf was was warranted and he did not exceed the UN mandate. Saddam thought he could screw with Kuwait and he was put in his place.
      Clinton (with balls) did wonders for your economy.
      Bush junior was a fucking liar and sellout. Part of the murderous bunch that ought to be charged. Will never happen of course.
      Obama lacked the balls to truly bring change (and hope) for the US. Of course, Senate and Congress did nothing to ease his tenure. I'm actually surprised he made it through his two mandate without getting JFK-ed out. His drone program (essentially a continuation of the killers' program) made things worse IMO.

    5. Re:Makes no difference by MouseR · · Score: 1

      Doesn't have to boil down to an armed militia but damn... where's the outrage? People should at least voice their concern.

    6. Re: Makes no difference by Anonymous Coward · · Score: 1

      People are voicing their concern, the government just ignores it... ... unless your soapbox is tall enough that your rhetoric is heard by the masses, in which case you are a terrorist.

    7. Re:Makes no difference by JustAnotherOldGuy · · Score: 1

      Bush senior was OK.

      George "Poppy" Bush: "Read my lips...no new taxes."

      *pauses a moment, then raises taxes*

      "We have not, and never will, trade arms for hostages."

      *quietly trades arms for hostages*

      --
      Just cruising through this digital world at 33 1/3 rpm...
    8. Re: Makes no difference by Anonymous Coward · · Score: 0

      Typical useless comment blaming Americans claiming we don't care about this or that and we're too fat, stupid etc. Your parents must be proud that you jump on the bash America cause it's cool wagon.

      Here in the real world where I have 30 plus years in computers, the facts are stubborn things. Privacy and security have always been important and something we learn about early on because hackers existed back then when I started too. I teach all my kids and wife how to surf the internet and what to look for when installing any software. I also make sure our computers at home are just as locked down as what I do for my clients. I Also post messages to family and friends about regular backups and keeping your computers up to date regardless of the OS they use. my geek friends who work not only for large corporations but their own businesses do the same. it's very normal for people in the USA to discuss things because we all hear about it in the news. yes there are some people that don't know or don't care but it's not as much as you'd think. So stop generalizing and do us all a favor and stop trying to be all superior when clearly you are not.

      Fyi, I have already found ways to shut down almost all the privacy related crap in windows 10. hopefully I'll have all the reporting features disabled soon. I think it's great that Microsoft is forcing updates on win10. Frankly it's about time.

      Please ignore the facts and stay on your little I hate America wagon. it's fun to read the same comments made over and over. Not too mention that you honestly think we care what some unknown hater had to say.

    9. Re: Makes no difference by Anonymous Coward · · Score: 0

      Said nobody.

    10. Re: Makes no difference by Anonymous Coward · · Score: 0

      I agreed with everything but Obama lacking balls. The Republicans are complete dicks, stonewalling and slowing down everything. He tried plenty.

  3. Certain amount of security by obscurity by Anonymous Coward · · Score: 0

    Its not a great means of security, but using non-standard software can keep you away from their reaches. If they generally target microsoft platforms, then using other platforms can offer benefits (not well developed or possibly even non-existent modules). It's not great security, in fact is hardly any kind of security at all: the security of "oh bother", but it is something. OTOH, the article may have been written to attract eyeballs and gather attention, and there may be modules targeting other platforms. Like anything else though, you start with the low hanging fruit and the most available, most common target.

  4. Reply from an American no longer living in USA by Anonymous Coward · · Score: 0

    Dear MouseR,

    I am an American who has chosen to live outside of America

    Although I still love my country, I can no longer stand the government which rules over it

    I am an American who do care about my rights, and I do care enough to move myself and all my family members out of the country which I love so much

    It may have been a long week for you, but it has been more than a decade for me and my family, living outside of my beloved U. S. of A, and by the way, me and my family are not alone

    Thousands (if not more) Americans have chosen to stay out because of the same reason. All of us do love our country but because of the stupidity / complacent / sheep-like behavior of our fellow country-persons, we know that USA has become a lost cause

    When they elected, and re-elected Bush junior we already facepalmed and imaging our double-facepalmed when our country-persons elected and re-elected Obama !

    USA is no longer the USA or yore. It is become an empty shell

    The fall of America may not happen in my lifetime, but please take my advice - those of us who chose to stay outside know that it is coming

    1. Re: Reply from an American no longer living in USA by Anonymous Coward · · Score: 0

      Me too. Two thunbs up. Nearly 20 year expat.

  5. Hardly surprising by Anonymous Coward · · Score: 0

    Criminal behaviour from a corrupt, criminal, and terrorist regime. Hardly any surprise there.

  6. This is just a diversion by Aviation+Pete · · Score: 1
    Symantec tries to create the impression that the NSA needs malware to extract data from Microsoft systems.

    Their intention is to make us think the NSA doesn't already enjoy first-class access though their custom backdoors. Don't be fooled!

    --
    You know it's time for the next revolution when your rulers' names end with roman numerals.
    1. Re:This is just a diversion by MrL0G1C · · Score: 1

      Windows 10 gives up all pretence of having any privacy.

      Sending every keystroke to MS HQ!!!! We used to call software that does that a virus, key-logger, malware, now Microsoft are doing it, hoping the general population doesn't notice.

      You really have to advise anyone you know not to install windows 10, it is out and out spyware, and you can't turn it all off in the privacy settings.

      --
      Waterfox - a Firefox fork with legacy extension support, security updates and better privacy by default.