March 8, 2017 by

WikiLeaks: CIA Malware Turned iPhones, smart TVs into Hacking Devices

WikiLeaks has leaked a large trove of CIA documents and hacking tools that were supposedly used by the agency to compromise smartphones, computers and even IoT devices such as smart televisions, in what could be the largest CIA leak in history.

Code-named “Vault 7” by WikiLeaks, the whistleblower agency claims it is the largest ever publication of confidential documents on the agency. The initial release, claimed as the first installment in a large trove of CIA material by WikiLeaks, contained 7,818 web pages with 943 attachments. A large portion was redacted by WikiLeaks editors so as to avoid disclosing the source code of the CIA’s cyberweapons. If the entire archive of CIA material is to be considered, there are several hundred million lines of computer code, according to WikiLeaks.

Now, thousands of files revealing a large majority of the CIA’s cyberweaponry have been exposed, with tools and instructions to breach popular calling service Skype, Wi-Fi networks, commercial antivirus programs used by millions around the world and more.

In revelations that could amount to significant ramifications in the CIA’s relationship with Silicon Valley, WikiLeaks revealed that a “specialized unit in the CIA’s Mobile Development Branch” developed a malware to compromise and steal data from iPhones and other Apple products running iOS.

Further, a separate but similar CIA unit also targets the Android operating system, used by a majority (~85%) of the world’s smart phones.

A damning excerpt from the press release reads:

1.15 billion Android powered phones were sold last year. “Year Zero” shows that as of 2016 the CIA had 24 “weaponized” Android “zero days” which it has developed itself and obtained from GCHQ, NSA and cyber arms contractors. These techniques permit the CIA to bypass the encryption of WhatsApp, Signal, Telegram, Wiebo, Confide and Cloackman by hacking the “smart” phones that they run on and collecting audio and message traffic before encryption is applied.

Targeted: Windows, OSX, Linux, Routers, Smart TVs

The CIA also reportedly runs “a very substantial effort” to compromise and control Microsoft Windows, the world’s most used operating system, with its malware. Additionally, the CIA also developed multi-platform malware strains to attack and control systems running Windows, Mac OS X, Solaris, Linux and more.

Smart televisions were also targeted, with the CIA’s Embedded Devices Branch (EDB) developing an attack against Samsung smart TVs. Upon infection, the smart TVs transform into covert microphones, according to documents revealed by WikiLeaks.

The attack against Samsung smart TVs was developed in cooperation with the United Kingdom’s MI5/BTSS. After infestation, Weeping Angel places the target TV in a ‘Fake-Off’ mode, so that the owner falsely believes the TV is off when it is on. In ‘Fake-Off’ mode the TV operates as a bug, recording conversations in the room and sending them over the Internet to a covert CIA server.

WikiLeaks is comparing the scale the leak to that of 2013, when former CIA contractor Edward Snowden released a trove of agency documents.

Image credit: Wikimedia.

About the author

Image of Author

LIFARS is the global leader in Digital Forensics and Cyber Resiliency Services. Our experience spans two decades working on high profile events, often in concert with Law Enforcement Agencies around the world. Our proprietary methodology derives directly and indirectly from our experience working with and for U.S. Intelligence Agencies, Interpol, Europol, and NATO. We are solely dedicated to Cyber Resiliency and thus pay close attention to all aspects of our clients’ engagements experience while providing a strategic and integrated array of services to minimum risk and disruption while protecting your brand.

Related articles

‘EternalRocks’ Exploit uses Seven NSA Cyberweapons

A security researcher has discovered a repackaged exploit of a total of 7 NSA cyberweapons in a...

Read more arrow_forward

WikiLeaks Reveals CIA Windows Spyware ‘Athena’

WikiLeaks has published documents from the CIA’s “Athena” project, a spyware malware that...

Read more arrow_forward

CIA Blasts WikiLeaks for Publishing Breached Secret Documents

The Central Intelligence Agency (CIA) has lambasted WikiLeaks, accusing the whistleblower...

Read more arrow_forward