NSA hacked? Top cyber weapons allegedly go up for auction

The hackers have offered sample files, which some security researchers say appear to contain legitimate exploits

An anonymous group claims to have stolen hacking tools that might belong to the National Security Agency and is auctioning them off to the highest bidder.

It’s a pretty bold claim, but the hackers have offered sample files, and some security researchers say they appear to contain legitimate exploits.

The files were allegedly stolen from the Equation Group, a top cyberespionage team that may have links to the NSA.

The Equation Group is known to use some of the most advanced malware and probably helped develop the infamous Stuxnet computer worm, according to security firm Kaspersky Lab.

Over the weekend, hackers known as the Shadow Brokers claimed to have stolen the very cyber weapons the group has used.

“We auction best files to highest bidder. Auction files better than Stuxnet,” the hackers said in a Tumblr posting using broken English.

Samples of the stolen files are dated most recently to 2013, and they do contain coding related to hacking, said Nicholas Weaver, a security researcher at the International Computer Science Institute in California.

“It appears to be a large amount of NSA infrastructure for controlling routers and firewalls, including implants, exploits, and other tools,” he said in an email.

The exploits specifically target firewall technology from Cisco, Juniper, Fortinet, and Chinese provider Topsec, said Matt Suiche, CEO of cyber security startup Comae Technologies, in a blog post.

Although the exploits were poorly coded, “nonetheless, this appears to be legitimate code,” he added.

Virginia-based Risk Based Security has also looked at the sample files and said that one of the exploits contains an IP address registered by the U.S. Department of Defense.

None of this means that the NSA has been hacked. The Shadow Brokers may have simply come across a compromised system that was hosting the exploits, Risk Based Security said in a blog post.

It's also possible the Shadow Brokers are promoting a big scam. Deception-based schemes are very common in hacking, Risk Based Security added. The NSA hasn't acknowledged any ties with Equation Group and on Monday, it didn't respond for comment.

Nevertheless, the Shadow Brokers are asking buyers to bid with bitcoin, although the group is offering no guarantees it will hold its own end of the bargain.

However, it’s promising to publicly dump all the files for 1 million bitcoins or US$566 million. So far, the group has only received $45 worth in bitcoin, but it's hoping that "wealthy elites" end up trying to buy the stolen files. 

In their Tumblr posting, the Shadow Brokers warned that the hacking tools they've stolen could be used on banks to cause havoc. 

"If electronic data go bye bye where leave Wealthy Elites?" the group said. 

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Michael Kan

IDG News Service
Show Comments

Cool Tech

Breitling Superocean Heritage Chronographe 44

Learn more >

SanDisk MicroSDXC™ for Nintendo® Switch™

Learn more >

Toys for Boys

Family Friendly

Panasonic 4K UHD Blu-Ray Player and Full HD Recorder with Netflix - UBT1GL-K

Learn more >

Stocking Stuffer

Razer DeathAdder Expert Ergonomic Gaming Mouse

Learn more >

Christmas Gift Guide

Click for more ›

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Ratchada Dunn

Sharp PN-40TC1 Huddle Board

The Huddle Board’s built in program; Sharp Touch Viewing software allows us to easily manipulate and edit our documents (jpegs and PDFs) all at the same time on the dashboard.

George Khoury

Sharp PN-40TC1 Huddle Board

The biggest perks for me would be that it comes with easy to use and comprehensive programs that make the collaboration process a whole lot more intuitive and organic

David Coyle

Brother PocketJet PJ-773 A4 Portable Thermal Printer

I rate the printer as a 5 out of 5 stars as it has been able to fit seamlessly into my busy and mobile lifestyle.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?