WikiLeaks Releases Documents on Two CIA Projects Targeting Network Protocols
SputnikNews.com
06.07.2017
According to WikiLeaks, the BothanSpy is an implant targeting the SSH client program for Microsoft Windows platform, stealing user credentials form active SSH sessions.
MOSCOW (Sputnik) – The WikiLeaks whistleblowing platform released on Thursday a new package of CIA documents from the so-called Vault 7 project, in particular the documents on two separate CIA projects aimed at stealing users’ login details for remote access to a server of a website.
“Today, July 6th 2017, WikiLeaks publishes documents from the BothanSpy and Gyrfalcon projects of the CIA. The implants described in both projects are designed to intercept and exfiltrate SSH credentials but work on different operating systems with different attack vectors,” WikiLeaks said in a statement.
SSH is a cryptographic network protocol which gives the user a secure remote access to a website’s server. The SSH credentials are the login details, namely the server address, port number, the username and the password.
The Rest…HERE
