As well as mass surveillance there is also what you call active surveillance or simply hacking tools
can be installed using the same type of malicious malware and spyware used by Sonna criminals onto machine
or phone.
If your target tools for passive and active surveillance are sold by security companies to governments
if the governments don't develop themselves or even if they do if they want to buy extra tools.
There is a large and very active mark in such tools.
And when the hacking team group was hacked themselves it was revealed that they were doing that.
Let me introduce you to the catalog to give you an idea the sort of tools that governments and any well-resourced
threat agent have available to them.
The catalog is a leaked document.
The NSA is hacking and spying tool set circa around 2008.
So first let's discuss a passive RF retro ultra high frequency reflector.
If we go down here I can show you some
and there we are.
These can be extremely small electronic devices that need only micro amps of power or in some cases
need no power at all.
Meaning that they can remain active for years.
They don't radiate any RF energy so sweeping light you see in the movies doesn't work.
They can also be made with commercially off the shelf electronics making them on traceable.
One such example is code named loud Auto which is basically an audio listening book.
And we can see here audio based RF retro reflector provides room or audio from targeted space using
radar basic post-processing.
So what that means is in order to listen to this device a person needs to be at a distance somewhere
and then send a focus be of radio frequency energy targeted at that retro reflector.
They are then able to listen to the rooms or radio.
The device is only active when it reradiate back to the sender.
Otherwise it's totally passive radiation no RF so undetectable and uses virtually no power.
These retroflex can be used for all sorts of interesting things.
Let me show you something else
if you look here under keyboard's
data RF retro reflector provides return modulated with Target data keyboard low data rate digital device
when illuminated with radar.
So this is installed in a keyboard an observer pointing one of those Focus beams of radio frequency
energy targeted that the reflector will be able to record all the keystrokes on the keyboard.
Again passive radiation there are so undetectible and uses virtually no power and there's also rangemaster
RF retroflex that provides an enhanced radar cross-section for vagrant collection is concealed in a
standard computer video graphics array.
BGA cable you can see there between the video card and video monitor is typically installed in the ferrite
on the video cable so they can watch what you're doing on your monitor again I see how tiny this thing
is.
Passive radiation no RF so undetectible and uses virtually no power.
Obviously these things need to be installed and this process is called interdiction which means the
devices are placed in physical before you get them or after.
But even if you're not a target of specific interdiction you are a target of general interdiction.
So for example there is Jepp plow which is here
hire is a firm where persistent implant for Cisco PIX series NASA firewall's persist the anti banana
GLI software plan.
JetBlue also has a persistent back door capability D.A. by the way is a contractor to the NSA that provides
all the hacking tools.
If you're not aware firmware is a physical chip on the device.
So in this case is a physical chip on this router or firewall firmware.
Persistence means it will survive a re-install of the operating system.
It can be considered a firmware rootkit.
So what this is showing is here is documented evidence that Cisco and Juniper devices which are really
the backbone of the Internet that we use are compromised and will be used for surveillance.
If you're wondering about the strange code names to assign to a project randomly like Biji then a human
creates a name so you end up with banal and Gilleo or something strange like that.
But strange names like that do help people remember them.
Let's have a look at some of the other interesting ones.
Here we have nightstand.
An active eighty two point eleven wireless exploitation injection tool.
That's why fine payload exploit delivery into otherwise denied target space.
Nightstand is typically used in operations where wired access to the target is not possible.
So that's basically a wife by cracka and interestingly leaked e-mails of Expo's plans by hacking team
and a Boeing subsidiary to deliver spyware via drones for sale to government agencies which would essentially
be this device on a drone.
So there are ways to counter this though which will go through as part of a cause.
Another interesting one is irate Monck
irate provides software application persistence on desktop and laptop computers by implanting the hard
drive firmware to gain execution through Master Boot Record substitution.
Again that means total persistence.
So if they get access to or if this is installed on your machine then formatting the hard drive reinstalling
the operating system.
None of that is going to help.
None of it is going to shift.
It can be virtually impossible to detect.
The only thing that would work in this case would be to actually throw the hard disk away.
But obviously if they have tools like this that are implants in the firmware of the motherboard then
you have to throw your entire computer away to get rid of this type of malware.
Another interesting one is monkey calendar
which is here and this is actually a SIM card so you may not be aware that SIM card issue commands to
the handset.
So this is a SIM card that issues commands to your handset and then sends out as M-S messages informing
what you're doing in your location and whatever else or the information that they desire.
And the last one that I'm going to show you that's interesting is Candygram mic GSM cell tower of a
target network capable of operations 900 1800 or 1000 megahertz.
Whenever a target handset enters the Candygram base stations area of influence the system sends out
an S M S through the external network to ready to watch films.
So this is a fake base station.
They will set up as Vodafone and then monitor and track you and hack you through it.
And these are from circa 2008 2009.
Imagine what they might have now if your government is an active threat to you or anyone of sufficient
means motive and opportunity then I hope you can see that if you are a target.
The only way to be anonymous online is to be anonymous offline as well.
And we'll talk more about this later as we go through the course.
You can see that there are also hobbyists who are recreating these tools based on what they've seen.
And we're also working on similar tools so you can see here is a wife by hacker.
You have retro reflectors active radio injection hardware implants passive radio interception.
So there's no reason why a highly resourced criminal organization and hacking groups won't be utilized
in search tools going forward for further information on NSA M-14 I spying.
Check out the video through a prism darkly for general information on CIA hacking tools.
Look at WikiLeaks vault seven and eight and generally look at WikiLeaks for government spying type information.
The Intercept is also a good place for scoops from time to time on information about what's going on
in terms of government spying.
No to use good judgment with all these resources I'm pointing to to evaluate what you read.
Some will be true some speculative and some are just inaccurate.
And to conclude there's no secret at all that well-resourced governments are spying and hacking on everybody
to gather intel.
There have been leaks about the likes of the U.S. and the U.K. but countries like Russia we haven't
seen many leaks yet.
Well they are engaging in serious cyber warfare against their adversaries the U.S. the U.K. the Ukraine
and messing around the elections our governments are in a cyber war that seems to be getting more and
more heated and as citizens are in the middle of it.