Shadow Brokers sell another batch of NSA tools

India : submarine data leaked
August 24, 2016
Critical vulnerability in WordPress, Drupal and Joomla – 13000+ Pakistani Websites Affected
January 19, 2017

Shadow Brokers sell another batch of NSA tools

The software package called Equation Group Windows Warez include exploits for vulnerabilities in Windows and tools to bypass anti-virus protection. Programs are distributed into several categories..

Hackers Shadow Brokers put up for sale next batch of tools for hacking, stolen from Equation Group. Recall, this organization associated with the United States National Security Agency. Dump Cost is 750 bitcoins (about $ 678.6 thousand.)

The software package called Equation Group Windows Warez include exploits for vulnerabilities in Windows and tools to bypass anti-virus protection. Programs are distributed into several categories:

Fuzzing tools (used to detect errors and security holes);
Frameworks exploits;
Network tab;
Tools for Remote Administration (RAT);
Exploits for vulnerabilities (including zero-day) in IIS protocols, RDP, RPC and SMB, allowing to execute code remotely;
Backdoor (tab) for the SMB.
Notably, for remote administration tool DanderSpritz previously mentioned in the documents of NSA declassified Edward Snowden.

According to the researcher Jacob Williams (Jacob Williams), put up for sale package also contains malicious software that can evade detection by antivirus (Fully Undetectable, FUD). The malware remains undetected for products such as Avira, Avast, Dr.Web, ESET Antivirus, Comodo, McAfee Antivirus, Microsoft Essential, Panda, Symantec, Trend Micro and Kaspersky Antivirus.

Tier3 previously discussed this breach and its impact in detail article here.

Leave a Reply