Slashdot Mirror


US Military Publicly Dumps Russian Government Malware Online (vice.com)

An anonymous reader quotes a report from Motherboard: This week, U.S. Cyber Command (CYBERCOM), a part of the military tasked with hacking and cybersecurity focused missions, started publicly releasing unclassified samples of adversaries' malware it has discovered. CYBERCOM says the move is to improve information sharing among the cybersecurity community, but in some ways it could be seen as a signal to those who hack U.S. systems: we may release your tools to the wider world. On Friday, CYBERCOM uploaded multiple files to VirusTotal, a Google-owned search engine and repository for malware. Once uploaded, VirusTotal users can download the malware, see which anti-virus or cybersecurity products likely detect it, and see links to other pieces of malicious code.

One of the two samples CYBERCOM distributed on Friday is marked as coming from APT28, a Russian government-linked hacking group, by several different cybersecurity firms, according to VirusTotal. Those include Kaspersky Lab, Symantec, and Crowdstrike, among others. APT28 is also known as Sofacy and Fancy Bear. The malware itself does not appear to still be active.

74 comments

  1. g0v3rnm3nt cyb4r h4xx0rz c4ll1ng h4xx!!11! by Anonymous Coward · · Score: 0

    If you talk like a s'kiddie, you get treated like a s'kiddie.

    Anyhow, they're keeping the good stuff for themselves, of course. So this is chickenfeed for the world. (Term of art. Look it up.)

    1. Re:g0v3rnm3nt cyb4r h4xx0rz c4ll1ng h4xx!!11! by Rockoon · · Score: 0

      The true purpose is to increase the number of "cyber attacks" that they can attribute to russians.

      --
      "His name was James Damore."
  2. LMAO by LordWabbit2 · · Score: 4, Interesting

    I will laugh my ass off if the Russian's simply do the same thing and upload American malware, we already know from multiple sources that America is doing cyber war just as much as the Chinese and Russians etc. This is just a publicity stunt... although I have to admit I would like to take a look at them, disassemble them and see how they work. I took an in depth look at the Melissa virus back in the day (although that wasn't exactly hard, it was written in VBA) it did something that work wanted me to do, so I wanted to see how it did it. Horrible code, boggles the mind how it managed to spread and do so much damage with such shitty code. So I copied the one line of undocumented API code that it used, to do what I needed to do and the company anti-virus did not like it at all. So in a meeting I said "I can do what you want me to do, but you will have to switch off the anti-virus", yeah, that didn't fly. Rightly so, so we had to figure out another workaround.

    --
    There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    1. Re: LMAO by Anonymous Coward · · Score: 0

      Like that ever happened

    2. Re:LMAO by Anonymous Coward · · Score: 0

      it takes skill to write the shittiest code that gets the job done, e.g. the underhanded C contest

    3. Re:LMAO by Anonymous Coward · · Score: 1, Insightful

      And here it is. The excuse.

      So we constantly heard about how if Russia is doing mean things on the internet, then where is the proof? Why don't they show us?

      Now they do, and it's "But America does it too!!!!!!!111111".

      If you haven't been paying attention, America's intelligence agencies have been getting their dirty laundry publicly posted online for about a decade thanks to the combined efforts of Assange, Russia, and Snowden. I don't think "Imagine if Russia did it too" is really much of a threat, when, well, that's exactly what they've been doing to weaken the US political for the last 10 years so that idiots like you can deflect from the growing problem of malicious online actions by Russia.

      Well done you fucking useful idiot for doing Putin's job for him. The US is both responding in kind here to Russian aggression AND proving their case, this is a good thing because we can now see it's not just made up speculation for the sake of getting more funding or some other conspiracy theory, though I'm sure the hardcore Putinistas will still claim it as such.

    4. Re:LMAO by MillionthMonkey · · Score: 1

      No, there are things the Americans don't do.

      The Russian government requires all software companies there to include whatever code they give them. You should never run closed-source software on your machine if a Russian company was involved.

    5. Re: LMAO by Anonymous Coward · · Score: 0

      That sounds awfully like PROJECTION.

    6. Re:LMAO by Anonymous Coward · · Score: 0

      Which "things" would that be?

    7. Re:LMAO by LordWabbit2 · · Score: 1

      No, there are things the Americans don't do.

      You may need to to elaborate.
      It seems like America is willing to do what ever it wants.
      Torture
      Chemical attacks
      Wrongful arrest.
      Illegally invading countries.

      Napalm and agent orange, FFS I mean where do Americans
      draw the line on what they will not do?

      --
      There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    8. Re:LMAO by LordWabbit2 · · Score: 1

      You are the only nation to drop a nuke in anger, in war. Twice. On civilians. Children. The first I can understand, the second? Why? So you could play with your new toy?

      --
      There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    9. Re:LMAO by LordWabbit2 · · Score: 1

      Like fighting for oil.

      --
      There are three kinds of falsehood: the first is a 'fib,' the second is a downright lie, and the third is statistics.
    10. Re:LMAO by Anonymous Coward · · Score: 0

      Leaving aside the chemical attacks (when did you write your list? The 1970s?) Well:

      1. We don't persecute gay people while our President insists on constantly appearing topless in various macho pursuits because, apparently, he's not entirely, uh, comfortable with himself.
      2. While there's some electoral hijinx, the vast majority of votes are counted fairly and legally. The entire election is not rigged by the previously mentioned bear wrestler - despite his best efforts and do not imprison political opponents and those who are allied to political opponents - even if the idiot previously mentioned closet case did help elect someone who would like to do all that shit.
      3. We do not assassinate political opponents in foreign soil - yes, the CIA has been known to kill people seen to be military threats, but Hillary Clinton can visit Britain without risking the CIA covertly and clumsily murdering her.

      All the stuff you mentioned? I'm not happy with any of it (nor is any red blooded decent American, especially the torture), and am glad many of the items on your list haven't been practiced for several decades, but here's a question: can you name many nation states with significant amounts of power who have not committed all these acts at least once in the last 40-50 years (the same time span)?

    11. Re:LMAO by Anonymous Coward · · Score: 1

      You do not have the slightest clue as to what life was like during WW2. Countries were totally destroyed. There were 60 million dead. Extermination camps that automated and optimized the most efficient way of killing people. There were no Geneva Convention or rules on the treatment of POW's. Although it is ironic because today the Geneva Convention would allow the immediate execution of any combatant not officially affiliated with the armed forces of a nation state.

      "On civilians. Children"
      In WW2 there was no difference between combatants and non-combatants. There were no smart bombs or laser guided missiles. Bombing raids were considered successful if 20% of the bombs dropped hit the intended targets. Pick up a fucking history book. WW2 was a total fight to the death for all sides.

      Fire bombing Tokyo caused more damage and killed more people than either of the nukes.
      "The first I can understand, the second? Why?" Because Japan didn't surrender after the first one. Is that concept to difficult to wrap you little head around? After the end of WW2 there were no German or Japanese regrouping to launch asymmetric warfare upon it's enemies. Why? Because the US had beat the resistance out of them. They were to busy just trying to crawl out of the rubble to start any trouble.

      Today's weak kneed give peace a chance pussies have never experienced a real war. A real war today would start with the systematic carpet bombing on every city with a population above 100. Trying to project today's societal norms to what was going on in the 1940's just exposes the ignorance of today's moral warriors and outraged snowflakes who are busy demanding their "safe spaces" so they can avoid anyone who might offend their tender sensibilities.

    12. Re:LMAO by Anonymous Coward · · Score: 0

      Ah, yes, "fighting for oil". And yet, somehow, the US did not benefit from that fighting. No US companies got the rebuilding contracts, and US companies aren't processing the oil, and US companies don't supply, maintain, or even transport the oil.

      It seems in your head the US is so evil it will invade another country to get their oil, then turn around and do nothing as the government awards all the oil contracts based on bribes from French, German, and Chinese companies? Does the cognitive dissonance come from the drugs, or from repeated impacts to the skull?

    13. Re:LMAO by Anonymous Coward · · Score: 0

      So we constantly heard about how if Russia is doing mean things on the internet, then where is the proof? Why don't they show us?

      Yeah, no one (with an IQ over 70) ever said that. Every country fucks with every other country. The only important questions were A) whether Trump or his campaign were involved or B) whether Russia altered election results. The answer to both has been clearly 'no' for a long-ass time.

    14. Re:LMAO by Anonymous Coward · · Score: 0

      They, the civilian population, were warned in both cases several days before.

      They were told to leave cities.

      They were told what was going to happen.

      They were told to urge their leaders into pace.

      They declined to leave.

      They failed to sue for peace.

      They made their beds by supporting the war, refusing to stop it, and refusing to leave an active target area.

    15. Re:LMAO by Anonymous Coward · · Score: 0

      From a buddy in political science: America alone has enough cluster bombs to kill every mammal on the planet a dozen times over. Only enough nukes to do it once or twice, though.

  3. killer kites with no strings attached by Anonymous Coward · · Score: 0

    under high winds, the candidates' wire spike signs they stuck all over are blowing all over the place like flying spikes.

  4. Re:We need to keep perspective here by Anonymous Coward · · Score: 1

    Yes, help these people out. But after things have settled down begin looking at no-building zones in these places buried in woods with poor access for large vehicles and low water main pressures. Or, if you build there you truly are on your own, pioneer! Just like the mandates being set down for people who choose to keep building and living in Mississippi flood plains. The Feds have no money to keep bailing your asses out when your little escape island is going up in flames. Or underwater with the gars.

  5. Re:kind of moot anyway by Anonymous Coward · · Score: 0

    Or she is allowed to run one. It's rotten, through and through, from top to bottom.

  6. Re:kind of moot anyway by Anonymous Coward · · Score: 0

    ...and Trump knowingly uses an unsecure iphone.

  7. Are US systems protected against these samples? by archer,+the · · Score: 2

    If not, talk about giving away the keys to the castle...

    1. Re:Are US systems protected against these samples? by 110010001000 · · Score: 1

      Yeah, really. What would happen if the Russians obtained these samples?

  8. Re: We need to keep perspective here by Anonymous Coward · · Score: 0, Interesting

    That would be awesome! But with a Republican controlled Senate, a lot of Republucan damage don't be undone.

    Expect a Trump caused recession in about 4 years and Tate Republicans blaming Obama and their sycophantic moronic hordes believing it.

  9. Maybe there's a voting machine attack by Anonymous Coward · · Score: 0

    Perhaps there's an attack vector that is used against voting machines. You should look carefully and if there is void the elections with those machines.

    I suspect this has nothing to do with Trump and everything to do with lower government officers protecting the US.

  10. Meanwhile, 18 months ago... by Archtech · · Score: 4, Interesting

    "The Marble Framework - How the CIA Obfuscates and Pretends to be Someone Else"

    https://viableopposition.blogs...

    --
    I am sure that there are many other solipsists out there.
    1. Re:Meanwhile, 18 months ago... by Anonymous Coward · · Score: 0

      The CIA is a US spy agency. That's their job.

      Why do people get offended when spies spy and immigration enforcement enforces immigration law?

    2. Re:Meanwhile, 18 months ago... by Archtech · · Score: 1

      The CIA is a US spy agency. That's their job.

      Why do people get offended when spies spy and immigration enforcement enforces immigration law?

      Who said anything about being offended? This thread's topic is about how "U.S. Cyber Command (CYBERCOM)" publicly dumped "Russian government malware online".

      If the topic is worth publishing, let alone discussing, there is surely an implication that it is bad for the Russian government to be creating and/or using malware.

      So I thought it would provide some context for people to know that Wikileaks had dumped US government malware online over a year earlier. Moreover, some of that US government malware is designed to camouflage online activity and make it look as though it came from a different country.

      Thus, for example, any apparent "Russian government malware" could possibly have been created and distributed by the CIA.

      Just saying.

      --
      I am sure that there are many other solipsists out there.
    3. Re:Meanwhile, 18 months ago... by Archtech · · Score: 1

      The CIA is a US spy agency. That's their job.

      Why do people get offended when spies spy and immigration enforcement enforces immigration law?

      As to the third sentence - why people get offended - you might ask those responsible for punishing alleged spies against the USA with long - including life - prison sentences, and even the death penalty. Ask the Rosenbergs https://en.wikipedia.org/wiki/..., or Robert Hansson https://www.voanews.com/a/a-13..., or many others.

      The customary view is that spying is perfectly normal and OK when done by our side, but wicked and criminal when done by others to us.

      --
      I am sure that there are many other solipsists out there.
    4. Re:Meanwhile, 18 months ago... by Anonymous Coward · · Score: 0

      That some foreign government is paying for it does not make the crimes any better.

    5. Re:Meanwhile, 18 months ago... by Anonymous Coward · · Score: 0

      Either you're trolling, or idiot progressives are really sthat stupid. No, they bitch when America spies, but then bitch that the same fucking NSA didn't catch everything coming from Russia ... as they regurgitate Russian propaganda.

  11. Why not by Anonymous Coward · · Score: 1

    The US's malware has been dumped already by the Shadow Brokers, we got nothing to lose at this point

    1. Re: Why not by Anonymous Coward · · Score: 0

      By now other bugs have been patched in major OSs. An new exploits created

  12. Well that makes perfect sense.. by 3seas · · Score: 1

    As an addiction the addicted have to do the things that keep their addiction feed. Hence cybersecurity must support the problem they claim to be against.

  13. Re: TRUMP DISAGREES. CLAIMS BAD ON BOTH SIDES! by Anonymous Coward · · Score: 0

    Sure, bad on both sides is totally off base. Or you are a moron. Tough choice.

  14. Those voting machines are already sieve-like by Anonymous Coward · · Score: 0

    There are plenty of attack vectors against voting machines. Just go visit a good many poll stations and see what they do with the receipts, for one. Don't forget to check the dumpster out the back. (Now which documentary was that again?)

    And don't forget mr. Diebold going "I will deliver you the election!" on a republican rally. Oops. Not that the other animal is free of blame. It's hijinks all over. It's just one example out of so many. The rooshians might turn out to be bit players in comparison. But they're so convenient to blame!

    1. Re:Those voting machines are already sieve-like by Iwastheone · · Score: 2

      I've worked as an Election Inspector in NY State for the last 6 elections. In NYS a system of both electronic and redundant paper ballots are kept. After the polls close two printouts are created, and signed off by other inspectors. The paper ballots are sealed and accounted for before being sent to the local police station. Redundancy is very much necessary, and paper ballots are the 'proof' in case of any questionable results.

  15. Re: We need to keep perspective here by Anonymous Coward · · Score: 0

    Inexplicably? Only if youâ(TM)re incapable of understanding how the economy works perhaps.

  16. Re: We need to keep perspective here by PopeRatzzo · · Score: 0

    Awwww, did somebody trigger you by insulting your TV star great leader?

    We know Russia collusion was real. We know about the ads. We know about the voter fraud. That you suggest a fake president can be put into power by another country and then we get "magical prosperity" out of it is an insult to our collective intelligence.

    What's next? Gonna post a doctored video? Go back to infowars where you came from.

    --
    You are welcome on my lawn.

  17. Re: We need to keep perspective here by Anonymous Coward · · Score: 0

    [citation needed]

  18. Re: We need to keep perspective here by nasch · · Score: 2

    Not likely the people doing computer security are also trained firefighters so what do you suggest? They just stop doing their jobs until there are no bigger problems in the US?

  19. You need to keep perspective here by Anonymous Coward · · Score: 0

    we need to keep these people in our prayers

    They didn't pray hard enough beforehand, that's why they are on fire. It's too late now.

    It's all part of HIS plan. They are supposed to burn here and then again in the next place.

  20. Re: TRUMP DISAGREES. CLAIMS BAD ON BOTH SIDES! by Anonymous Coward · · Score: 0

    The communists are these days with Google, the DNC and big NY Finance.

  21. Re: We need to keep perspective here by Anonymous Coward · · Score: 0

    Please cite evidence for all those things or even just Russian collusion. Since Mueller cant show any yet, what super powers of discovery do you have?

    Oh, I know, you read Vox and listen to NPR to learn everything worth knowing.

    Dumbass. The serious people are at least waiting for the Mueller report I think it will e fluff but if real I will be the first to pull a trigger on the firing line. But when it comes back empty you will just whine that Trump somehow blocked a proper investigation and should be impeached for that.

    Idiot.

  22. Whats this going to achieve? by Anonymous Coward · · Score: 0

    Giving any a-hole on the net access so they have a starting point for their malware??

    well done guys, you really thought this one through

  23. Re: We need to keep perspective here by Anonymous Coward · · Score: 0

    Yes, all of the filthy rich celebrities need a cash donation to help empty all the swag from their billion dollar mansions

  24. Re: We need to keep perspective here by Anonymous Coward · · Score: 0

    President Pelosi. I like it!

  25. Russian -linked cyber bollix by najajomo · · Score: 1

    Enough with this anti-Russian linked cyber bollix ..

  26. Bad Idea by Anonymous Coward · · Score: 0

    Releasing copies of the Russian malware is a very bad idea. When American government malware has been released it helped to fuel a large number of attacks. The Russian malware will have the same result. It is good that the level of security can be increased in the long term. In the short term this means many more attacks not by the Russians but by people using the released malware.

  27. Are we just gonna trust the US military?? by Anonymous Coward · · Score: 0

    For all we know, this IS US malware!
    I mean this is the biggest bully on the planet, with the biggest motive too.
    I have no doubt that Russia does shit like this too. But I also have no doubt that both nations aren't such noobs to not dump malware claiming it's by "the enemy".

    And always remember: The sole and only point of all this bullshit is, to get American and Russian average people to hate each other, so that can be exploited both for power, and to quiet anyone criticizing both regimes.
    I wouldn't even be surprised if they worked together and laughed their asses off at us. Yeah, tin foil hat, blah bla, daring not to suck authority dick, blah bla... I know. But I laughed at close friends for saying the things that literally were revealed in the Snowden leaks. So at this point, I shut up and don't exclude *any* possibility. ... Except time cube flat earth bullshit probably.

  28. Suck it, moskals by benjfowler · · Score: 1

    Glad to see somebody taking these Russian bullies down a few pegs.

    Klepto-fascist Russia respects strength, and literally despises weakness. You earn their respect by drawing clear boundaries, and then punching them hard every time they step out of line.

    You have to keep your pimp hand strong with these backwards bitches. There's no reasoning with them, because they are not civilised people of good will. You can't talk to Putinists like you talk to (say) the Americans or Europeans.

    1. Re:Suck it, moskals by Anonymous Coward · · Score: 0

      You can always tell an American, but you cannot tell him much.

    2. Re:Suck it, moskals by Anonymous Coward · · Score: 0

      Glad to see somebody taking these Russian bullies down a few pegs.

      Klepto-fascist Russia respects strength, and literally despises weakness. You earn their respect by drawing clear boundaries, and then punching them hard every time they step out of line.

      You have to keep your pimp hand strong with these backwards bitches. There's no reasoning with them, because they are not civilised people of good will. You can't talk to Putinists like you talk to (say) the Americans or Europeans.

      I've just looked at your post history and there is literally no fucking way that you're not Russian.

  29. A few comment up, I'm called a conspiracy theorist by Anonymous Coward · · Score: 0

    ...for thinking aloud about the possibility of this very thing. And here we are.
    It's like the latest South Park episode: Goddammit, I'm sorry Al Gore, yes, Manbearpig is real!
    Or in this case, the intelligence agencies always being one nutjob step ahead of even the craziest conspiracy theorists.

    (Please don't let time cube / flat earth / lizard people be real! Please...! *crosses fingers*)

  30. Re:A few comment up, I'm called a conspiracy theor by Anonymous Coward · · Score: 0

    What do you have against lizard people? Besides thats a slur, we prefer to be called Reptillians.

  31. Re: We need to keep perspective here by Klaxton · · Score: 1

    What about the many indictments, plea bargains, and outright convictions of trump's flunkies? Mueller hasn't shown a fraction of what he has.

  32. What a refreshing change... by Anonymous Coward · · Score: 0

    ... to the NSA dumpibg their malware online to infect the enrire world:

    https://www.google.com.sg/amp/s/www.theregister.co.uk/AMP/2018/10/19/leaked_nsa_malware/