Report: NSA intercepts computer deliveries to plant spyware

Germany's Der Spiegel, citing secret documents, also reported the NSA has backdoors in Juniper, Cisco, Huawei and Dell products

A special hacking unit of the U.S. National Security Agency intercepts deliveries of new computer equipment en route to plant spyware, according to a report on Sunday from Der Spiegel, a German publication.

The method, called "interdiction," is one of the most successful operations conducted by the NSA's Office of Tailored Access Operations (TAO), which specializes in infiltrating computers, wrote the publication, citing a top-secret document.

"If a target person, agency or company orders a new computer or related accessories, for example, TAO can divert the shipping delivery to its own secret workshops," Der Spiegel wrote.

The workshops, called "load stations," install malware or hardware components that give the NSA access to the computer, it wrote.

Der Spiegel did not say where the documents were obtained, although it is one of several news outlets, including The Washington Post and The Guardian, which possess information leaked by former NSA contractor Edward Snowden. He is not mentioned in the story, which was co-authored by filmmaker Laura Poitras, whom Snowden contacted.

The documents leaked by Snowden have prompted a U.S. government review of the NSA's spying activities and its impact on civil liberties and law. Technology companies, calling for stronger privacy controls, contend the agency's tampering with their networks could undermine their businesses.

Der Spiegel wrote that a 50-page "product catalog" it viewed from the NSA described a division called "ANT," which specializes in engineering access to products from companies such as firewall maker Juniper Networks, networking giants Cisco Systems and Huawei Technologies, and Dell.

"For nearly every lock, ANT seems to have a key in its toolbox," the publication wrote.

Another internal NSA presentation showed the agency has access to crash reports sent by computers to Microsoft, Der Spiegel reported. A prompt is sometimes shown during certain problems with Windows, and users are asked if they'd like to send an automated report to the company.

Der Spiegel wrote that the presentation indicated the NSA can intercept these reports from a sea of internet traffic using its XKeyscore tool, an internet monitoring tool revealed in July by The Guardian.

Intercepting the reports "appears to have little importance in practical terms" but provides insights into a targeted person's computer, Der Spiegel wrote.

Another top-secret document described NSA efforts to tap into the SEA-ME-WE-4 undersea telecommunications cable, which stretches from southern France to Thailand and connects Europe with North Africa and the Middle East.

On Feb. 13, the TAO "successfully collected network management information" for the cable, including Layer 2 information that shows circuit mapping, Der Spiegel reported, quoting the document.

Der Spiegel further described some of the TAO's computer exploitation activities, which include trying to redirect a targeted person's computer to servers controlled by the agencies that can deliver spyware.

The NSA and its U.K. counterpart, GCHQ, use a tool called QUANTUMINSERT to tracks a person's internet browsing and at opportune moments direct the user's computer to one of its FOXACID exploitation servers.

One document showed that QUANTUMINSERT was most effective when people were trying to visit the professional networking site LinkedIn, Der Spiegel said. The success rate was more than 50 percent, it said.

The NSA could not be immediately reached for comment Sunday night.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join the PC World newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection

Tags Huawei TechnologiesCisco SystemsDer SpiegelMicrosoftsecurityUS National Security AgencyExploits / vulnerabilitiesspywarejuniper networks

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Matthew Stivala

HP OfficeJet 250 Mobile Printer

The HP OfficeJet 250 Mobile Printer is a great device that fits perfectly into my fast paced and mobile lifestyle. My first impression of the printer itself was how incredibly compact and sleek the device was.

Armand Abogado

HP OfficeJet 250 Mobile Printer

Wireless printing from my iPhone was also a handy feature, the whole experience was quick and seamless with no setup requirements - accessed through the default iOS printing menu options.

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?