NSA Hackers The Shadow Brokers Dump More Files

The hacker (or a group of hackers) who call themselves The Shadow Brokers today published more files. From an article on Motherboard: This latest release comes while Hal Martin, an NSA contractor and, according to The Washington Post , the prime suspect in The Shadow Brokers case sits in detention after being arrested for allegedly stealing swaths of classified material. "TheShadowBrokers is having special trick or treat for Amerikanskis tonight," a message from the hackers posted to Medium reads. The message is signed with the same PGP key used to sign several previous posts, including the group's original announcement that came with links to a slew of NSA exploits. As for the files, The Shadow Brokers claim they reveal IP addresses linked to the Equation Group, a hacking unit widely believed to be tied to the NSA. "This is being equation group pitchimpair (redirector) keys, many missions into your network is/was coming from these ip addresses," The Shadow Brokers' post continues.The report adds that the dump contains 300 folders of files -- all corresponding to different domains and IP addresses. Security researcher who goes by the alias Hacker Fantastic the dump contains 306 domains and 352 IP addresses relating to 49 countries in total. "If accurate, victims of the Equation Group may be able to use these files to determine if they were potentially targeted by the NSA-linked unit."

Typing with a Russian accent

[penguinoid]

It's rather meaningless that someone accused of stealing information is in prison when some of the information was released. It does bring a smile to my face that their announcement is written in "Russian accent" English, especially with all the blaming Russia because we don't like the leaked info going around.

Re:

I feel sorry for Harold T. Martin. He seems to be a hard working guy with a lax sense of operational security, not a criminal. Hard to see any connection to the Shadow Broker.

Re:

[XXongo]

"Lax sense of operational security" you say? That seems to mean, here, that he took home a metric ton of hard drives with classified stuff on them. - if you want to be sympathetic to him, maybe he was just an obsessive compulsive hoarder, but it seems to go a bit beyond merely a "lax sense of security"-

Re:Typing with a Russian accent

[Anonymous Coward]

Maybe he didn't 'intend' to do that?
Maybe he thought it was 'mistake' and 'won't do it again'
or maybe 'he wouldn't do it again'
Maybe he 'didn't understand the markings'
Maybe he thought keeping the stuff 'at home' in his 'personal storage' was okay?
Maybe his security training was provided by the Secretary of State?

Re:

[Anonymous Coward]

Oh Hillary, I just knew you'd come to his rescue! Quick, get out the big clinton foundation guns ...

Re:

[Robert Goatse]

Yeah right, 500 TB of data and stuff stored in his house, car and shed. Sounds like an honest mistake to me. :|

Re:

[another_twilight]

I see the '50TB' number thrown about a lot, but the original FBI 'Criminal Complaint' [documentcloud.org] says;

7. Among the classified documents located thus far, six of them appear to have been obtained from sensitive intelligence

and goes on to talk about the markings on the documents that identify them as belonging to the government. The next part that seems interesting

10. During execution of the warrants, investigators located property of the United States with an aggregate value in well excess of $1000, which MARTIN had stolen.

And then talks a bit about the $1000+ worth of stolen goods.

I'm genuinely curious. Is $1000 a magic number that makes this a certain class of crime? I've seen it suggested that the 50TB represents the total capacity of the storage he had taken, not the volume of the data. Are y

Re:

[LifesABeach]

It looks like finding a dumb ass in a group of people is about all The Shadow Brokers(TSB) can do? Try publishing IBM's WATSON's source code and interface specs, at maybe WikiLeaks? If TSB can't, I understand about not being even the semi-brightest crayon in the box.

Re:

[FatdogHaiku]

...It does bring a smile to my face that their announcement is written in "Russian accent" English...

Am not seeing what is to be smiling about!
You perhaps are working with Moose and Squirrel?

Re:

[TFlan91]

My wife is eastern european, she constructs her english sentences (sometimes) in the way her native language structures their sentences.

Typing with an accent is a real thing.

Re:

[arglebargle_xiv]

Typing with an accent is a real thing.

Typing with accent is real thing. FTFY.

Re:

[TFlan91]

Ha!

Re:

[Maritz]

B) He has promised to

Hahahahaha

NSA

[Big Hairy Ian]

They are probably both working for rival NSA Teams the same as the clowns that were trying to sell the NSA's Exploit Toolkit

The fake Russian accent is so bad

[Anonymous Coward]

it's like it comes straight out of a bad Hollywood movie. These people are not Russian, they're just doing a terribly bad job at pretending to be. My guess, it's some U.S. intelligence agency doing these releases, and anyone who picks these tools up will in some carefully calculated way be worse off than you were before installing them.

Re:

[Opportunist]

Using that accent is actually pretty smart. Yes, it's fake, but it's supposed to be fake. That's the whole point.

A person's writing gives his origin away. If he is a non-native speaker, the way he words certain phrases and certain mistakes, grammatical or orthographic, he makes give an analyst an idea what his native language would be. Even if he is a native speaker, certain idioms and expressions can lend a hint to his origin, at the very least you'd be able to find out whether he's English, Aussie or Amer

Re:

[imatter]

Yep given the accent, they are trying to pin it on FPS Russia.

Re:

[russotto]

Pretty sure it's intentionally bad. Almost certainly American; I don't think anyone else (well, maybe a Canadian who saw too much Moose and Squirrel) would do a "bad Russian accent" that way.

Networks aren't secure

[110010001000]

No network is secure. The very concept of security is antithetical to what networks are about: sharing information. Any attempts to add security to networks is ultimately useless. Of course people will get mad to me for saying this, but this is proven over and over again: once information is on a network - it is shared. Due to the way networks are constructed there is no way to reliably exclude the sharing of the information, because there is no way to reliably validate connected endpoints. An endpoint can

Re:

[Maritz]

No network is secure.

Doubtless you think that is some kind of stunning insight. It's really just the Nirvana fallacy. Just because security can't be perfect doesn't mean it's pointless. You can't make it impossible, but you can always try your best to make it really fucking hard.

Bunch of clowns

[dcollins117]

This is the National Security Agency we're talking about. The narrative we're supposed to believe is that these are the best and brightest security professionals on the planet. All evidence suggests otherwise, with terabytes of classified information being carted out their own doors.

You'd think they would focus more on their own operational security and less on violating the civil liberties of normal, law-abiding American citizens, and yet they don't. What does that tell you.

Re:Bunch of clowns

[AmiMoJo]

They can't be the best, because the following groups of people won't work for them:

- People with a conscience
- People who care about the Constitution
- People who want to be really well paid
- People who can't get security clearance (previous crimes etc.)
- People who don't want security clearance (due to background checks etc.)

In fact I imagine they have suffering from a bit of a brain-drain since the Snowden revelations. You see a lot of ex-NSA people on LinkedIn, often leaking the codenames of the top secret projects they were working on via the CVs.

Re:

[russotto]

All the security in the world won't completely protect you against privileged insiders.

Re:

[Maritz]

A) He has publicly blasted the Wahabists.

lol. Let's pretend that that is a word that trump understands/can say, shall we?

He appeals to fear, which is why you like him. You're a coward.

Anyone Have A Link to the dump?

[Anonymous Coward]

Anyone have a link to the actual dump? Looks like this is another clickbait slashdot fuckfest without a link to the source in the story. You know, actual code that geeks would be interested in seeing the NSA use. Yeah fuck you slashdot.

And no; stealing and reposting every motherboard story to keep your failing site alive is not a good business model, especially with no linked sources. Do something original you fucking parasites.