Dumbo: CIA system to take over webcams, microphones

&quot;...is run by the field agent directly from an USB stick; it requires administrator privileges...&quot;<p>So?<p>This just in - people with physical and administrative access to a machine can install monitoring software - news at 11. Be sure to tell every MSP or Enterprise IT group to tune in.

I don&#x27;t have a real problem with this - physically accessing target systems to install spyware is exactly the way they should be doing things, as opposed to finding exploits that affect us all and keeping quiet about it.

I fancy these sophisticated spy tools which only require physical and admin access to a target machine...

If the CIA didn&#x27;t have this they really wouldn&#x27;t be doing their job... The question, of course, is whether they have proper oversight.

We really need more companies like Purism. <a href="https:&#x2F;&#x2F;puri.sm&#x2F;" rel="nofollow">https:&#x2F;&#x2F;puri.sm&#x2F;</a>

Can we get a wikileaks reveal on Julian Assanges finances?

You know, the CIA could probably avoid a little public push-back simply by not naming their system penetration components like the demented 1984 creeps that they are.<p>&quot;The Brutal Kangaroo project consists of the following components: Drifting Deadline is the thumbdrive infection tool, Shattered Assurance is a server tool that handles automated infection of thumbdrives (as the primary mode of propagation for the Brutal Kangaroo suite), Broken Promise is the Brutal Kangaroo postprocessor (to evaluate collected information) and Shadow is the primary persistence mechanism [...]&quot;

The title is misleading. This tool is to mute all the speakers, disable all the cameras and network adapter. I think it&#x27;s required for a meeting etc. A better program maybe just pull the power off.

64-bit XP is MOST CERTAINLY supported by this attack - it&#x27;s the same kernel&#x2F;codebase as Server 2K3 and Server 2K3 is indeed attackable with Dumbo since it&#x27;s the same Vista kernel and codebase.<p>And if 32-bit XP is supported, you can almost guarantee that Windows 2000 is supported by this attack as well, since XP is literally built on the 2K kernel.<p>Well, never could say I trusted Wikileaks with 100% accurate information.

Since the purpose of the software is to &quot;disable webcams, microphones&quot; (the &quot;takeover&quot; part is not implied in the text) using a USB stick one my assume it more efficient to use the power switch instead...

With every new publication Wikileaks just confirms it&#x27;s now just an agency of the Russian Goverment whose purpose it&#x27;s to undermine the confidence of the american people in their institutions.

Can webcams and microphones be turned on without turning on the hardware indicator lights by someone who doesn&#x27;t have physical access to the device in question?

seems like it requires admin access to be useful.

It&#x27;s a shame that when I see &quot;Wikileaks reveals CIA&quot; I&#x27;m thinking &quot;Hmm, I wonder what&#x27;s happening today RE Russia&quot; instead of being concerned with the actual release.

Spy agency has spy tools. I am shocked.

Requires admin access and physically inserting a USB drive.<p>Wikileaks will next reveal water is wet. Why does anyone pay attention to these charlatans?

russialeaks

Wikileaks is a tool of the KGB. Why are we sharing their disinformation here?