This Equation Group leak looks legit, fun (or someone had a *lot* of free time to fake it). C&C tool:pic.twitter.com/AU7KX57EWl
-
EPICBANANA exploits a line editing bug in Cisco PIX/ASA boxes. It's 2016 and we still have getline buffer overflows?pic.twitter.com/n3pNdt58F5
EXTRABACON exploits a Cisco ASA SNMP bug, perhaps in the cufwUrlfServerStatus OID or just general SNMP parsing.pic.twitter.com/Bk2RpUQS2Z
-
-
Note how comments and docstrings in the Equation Group leak seem to have been wiped, suggesting this is a package deployed to a C&C server.
-
ELIGIBLEBACHELOR exploits whatever custom protocol this is (TCP port 4000) on Chinese TOPSEC firewalls.pic.twitter.com/7PbGczY0YJ
- Show replies
New conversation -
-
-
@GossiTheDog They even use the "[+]" notation. The NSA seems to have hired those "no pushups" hackers that the FBI didn't want... -
And call it "sploit". Honestly, this looks like a team of interns...
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.