Slashdot Mirror
Government Spyware Vendor Left Customer, Victim Data Online for Everyone To See (vice.com)
The Germany-based spyware startup Wolf Intelligence exposed its own data, including surveillance target's information, passports scans of its founder and family, and recordings of meetings. From a report: A startup that claims to sell surveillance and hacking technologies to governments around the world left nearly all its data -- including information taken from infected targets and victims -- exposed online, according to a security firm who found the data. Wolf Intelligence, a Germany-based spyware company that made headlines for sending a bodyguard to Mauritania and prompting an international incident after the local government detained the bodyguard as collateral for a deal went wrong, left a trove of its own data exposed online. The leak exposed 20 gigabytes of data, including recordings of meetings with customers, a scan of a passport belonging to the company's founder, and scans of the founder's credit cards, and surveillance targets' data, according to researchers.
Security researchers from CSIS Security discovered the data on an unprotected command and control server and a public Google Drive folder. The researchers showed screenshots of the leaked data during a talk at the Virus Bulletin conference in Montreal, which Motherboard attended. "This is a very stupid story in the sense that you would think that a company actually selling surveillance tools like this would know more about operational security," CSIS co-founder Peter Kruse told Motherboard in an interview. "They exposed themselves -- literally everything was available publicly on the internet."
Security researchers from CSIS Security discovered the data on an unprotected command and control server and a public Google Drive folder. The researchers showed screenshots of the leaked data during a talk at the Virus Bulletin conference in Montreal, which Motherboard attended. "This is a very stupid story in the sense that you would think that a company actually selling surveillance tools like this would know more about operational security," CSIS co-founder Peter Kruse told Motherboard in an interview. "They exposed themselves -- literally everything was available publicly on the internet."
I've lost respect for people who use "easy" cloud services.
It appears you have never worked anywhere.
There is always that one guy who you have no idea why they were hired, and why they are still there. And is a net loss to your work.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
Thanks for giving a sensationalist version of the information in this article.
But your sister enjoys my lignite
They were just demonstrating their software on themselves! Look at how well it works!
CEO: Johnny English, CTO: Mr. Bean.
When you sympathize with stupidity, you start thinking like an idiot.
Doesn't sound very intelligent to me.
(disclaimer, I only RTFS)
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
taking corporate transparency a little too far.
Sig Follows: "Suppose you were an idiot. And suppose you were a member of Congress. But I repeat myself." -- Mark Twain
What more does anyone need to say?
#facepalm
File under 'M' for 'Manic ranting'
This is the kind of company you want to make deals with concerning spying on your voters? If they can't even keep their own crap secure, do you think they will keep your shady deals with them from public eyes? From the eyes of the people you want to spy on that you on the other hand also want to vote for you?
Yeah. Smart move. Then again, we didn't exactly expect you to know anything about IT anyway, considering your track record.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.