Skip to main content

WikiLeaks Has Exposed More CIA-Developed Malware [Achilles, Aeris, SeaPea]

By

WikiLeaks has been exposing CIA-developed hacking tools on a regular basis since early 2017. These leaks are a part of Vault 7 leaks, which have witnessed tons of hacking tools that target different operating systems with different attack vectors. In this series, WikiLeaks has exposed
CIA’s Imperial project.
The Imperial project contains information regarding this hacking tools. While Achilles and SeaPea target Apple’s macOS operating system, Aeris targets Linux-based systems.
Let’s tell you about these Linux and macOS hacking tools one by one:

Aeris 2.1

Aeris, named after Final Fantasy VII’s Aeris Gainsborough, is an implant designed to infect Linux-based systems. It’s an automated implant written in C that supports numerous POSIX-based systems. The supported platforms are:
  • Debian Linux 7 (i386)
  • Debian Linux 7 (amd64)
  • Debian Linux 7 (ARM)
  • Red Hat Enterprise Linux 6 (i386)
  • Red Hat Enterprise Linux 6 (amd64)
  • Solaris 11 (i386)
  • Solaris 11 (SPARC)
  • FreeBSD 8 (i386)
  • FreeBSD 8 (amd64)
  • CentOS 5.3 (i386)
  • CentOS 5.7 (i386)
This highlight features of Aeris are configurable beacon interval, standalone HTTPS LS support, SMTP protocol support, TLS encrypted communications, automated file exfiltration, structured C&C, and compatibility with NOD cryptographic specification.
The distribution of Aeris Linux malware takes place with a set of Python utilities with one binary per platforms listed above.
Find detailed information: Aeris

Achilles 1.0

Achilles malware comes with the capability to inject trojans into a macOS installer, i.e., a DMG file, for a one-time execution.
Achilles has been tested in Intel processors running OS 10.6. The brief instruction manual of Achilles tells that the malicious DMG file should behave like the original DMG file. After the user runs the infected file, the payload will be installed and later removed. This way, the malware tried to erase its footprints and avoid suspicion.
Find Achilles user guide: Achilles

SeaPea 4.0

SeaPea is a macOS toolkit that comes with stealth and tool launching features. It’s also able to hide files, socket connections, and processes on the infected systems. CIA has tested the SeaPea malware on OS X 10.6 and 10.7 operating systems.
The SeaPea toolkit operates by assigning the processes to one of the 3 different categories: Normal, Elite, and Super-Elite. All the commands in SeaPea are run as an Elite process.
Find SeaPea user guide: SeaPea
Labels:

Comments

Post a Comment

Follow Us

WHAT'S HOT

Google’s AI Can Create Code Better Than The Researchers Who Made It

By
Google developed AutoML to be an artificial intelligence that could help humans create other self-learning systems.
Post a Comment
Continue Reading »

The MS Paint App Is Now Coming To The Windows Store

By
Just when the world started mourning  about the possible death  of the image editing grandpa, MS Paint, Microsoft has showered some mercy upon the not so feature rich tool. Earlier, It was known that Microsoft was going to deprecate MS Paint after the release of
Post a Comment
Continue Reading »

Best Android Cleaner Apps You Need To Try Out Now

By
Cache files pile up over time and need to be cleared. Also, junk from ads and image thumbnails take up a lot of space. Android cleaner apps do a good job of finding unnecessary files and
1 comment
Continue Reading »

Reddit Transforms Into a Social Network But It Has Only ‘Three Users’

By
Reddit is working on social network-styled user profiles allowing Redditors to post content in their name and follow other profiles. Reddit’s co-founder Alexis Ohanian, Shitty_Watercolour, and Riot Games are the three users who have been given a profile each for the alpha testing. User profiles will roll out to all the users in the coming months.
Post a Comment
Continue Reading »