Surveillance firm Hacking Team hacked [Updated]


Userlevel 7
Badge +54
July 6, 2015  By Pierluigi Paganini
 

Hacking Team, the Italian surveillance firm that develops spyware and hacking software has been hacked by attackers that exfiltrated some 400Gbs of data.

 
The Italian security firm Hacking Team has allegedly been hacked, unknown attackers have exfiltrated some 400Gbs of data. The company has often been at the center of heated debate because of surveillance solutions that it develops, many experts and privacy advocated argue that the company sells its products to oppressive and dictatorial regimes.
 
At the timeI’m writing there is no information on how the attack was carried out or even when it occurred. (We reached out to Hacking Team but did not immediately hear back, which isn’t surprising considering.)
http://securityaffairs.co/wordpress/wp-content/uploads/2015/07/hacking-team-hacked-2.png
 
Full Article
 
There are many stories around now about this:
Wired.co.uk   -  http://www.wired.co.uk/news/archive/2015-07/06/hacking-team-spyware-company-hacked
betaNews  -  http://betanews.com/2015/07/06/hacking-team-hacked-as-tables-turn-on-notorious-surveillance-company/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed+-+bn+-+Betanews+Full+Content+Feed+-+BN
The Register  -  http://www.theregister.co.uk/2015/07/06/hacking_team_hack_fallout_torrent/
 

4 replies

Userlevel 7
Badge +54
6th July 2015  By Sara Peters
 
Milan-based Hacking Team tells customers to stop using its products after leaked documents reveal product source code, and that the company has sold to governments with records of human rights abuses.
 Source code for the Remote Control System (RCS) surveillance software as well as details of the international government agencies that purchased it were revealed today in an apparent doxing attack on Hacking Team, the Milan-based makers of RCS.
 
The dumped data revealed that Hacking Team had sold its products to several countries with poor human rights records, as well as to the FBI and U.S. Drug Enforcement Administration (DEA). Unnamed sources told Motherboard that Hacking Team has told customers to suspend use of the software, of which the newest version is named Galileo, and was previously known as Da Vinci.
 
Full Article.
Userlevel 7
Badge +54
A hacker has come forward to take responsibility for the explosive Hacking Team data breach.
 
                                               http://zdnet4.cbsistatic.com/hub/i/r/2015/07/07/c2398d3d-9c7e-42c1-817c-f3eaec16f7ff/resize/770x578/8e03f646ba9edaad842f7cafc86a286f/screen-shot-2015-07-06-at-12-10-58.png
 
By Charlie Osborne for Zero Day | July 7, 2015
 
The cyberattack led to another question: who was responsible? This query appears to have been answered in the form of Phineas Fisher, a hacker which previously took responsibility for an attack on Gamma, a surveillance firm which is also the creator of the FinFisher spyware. In 2013, researchers from Citizen Lab linked the FinFisher spyware with the monitoring of political dissidents in Bahrain.
 
Motherboard was able to contact the hacker at the time when Phineas Fisher had taken control of the Hacking Team Twitter account. To prove he was one and the same, Phineas Fisher used his parody Twitter account to promote the Hacking Team cyberattack:
 
Full Article
Userlevel 7
Badge +54
7th July 2015  By Lucian Constantin
 
Researchers sifting through 400GB of data recently leaked from Hacking Team, an Italian company that sells computer surveillance software to government agencies from around the world, have already found an exploit for an unpatched vulnerability in Flash Player.
 
There are also reports of exploits for a vulnerability in Windows and one in SELinux, a Linux kernel security module that enforces access control policies. The flaws were supposedly used by the company’s customers to silently deploy its software on computers belonging to surveillance targets.
 
Full Article
Userlevel 7
Badge +3
 By Adam McNeil,
 
Is the cause always noble? And what happens when it’s not?
This summer, two different events affected two different worlds. First, Milan-based Hacking Team — a small group of programmers who customize malware to gather intelligence — was itself hacked, and more than 400GB of its internal data was leaked. A few days later, a South Korean intelligence officer who had been implementing tracking software killed himself, and his suicide note allegedly referred to Hacking Team. As a result, many professionals in software development and espionage are pondering their future.   
 
    http://techcrunch.com/2015/10/12/the-hacking-quandary/

Reply