{"id":338417,"date":"2017-04-15T00:14:02","date_gmt":"2017-04-14T16:14:02","guid":{"rendered":"http:\/\/techcrunch.com\/?p=1477006"},"modified":"2017-04-15T00:14:02","modified_gmt":"2017-04-14T16:14:02","slug":"the-shadow-brokers-are-back-with-exploits-for-windows-and-global-banking-systems","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/the-shadow-brokers-are-back-with-exploits-for-windows-and-global-banking-systems\/","title":{"rendered":"The Shadow Brokers are back with exploits for Windows and global banking systems"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=738\" class=\"\"\/><\/p>\n<p>It\u2019s been several months since their last major exploit, but the hacking group dubbed Shadow Brokers is back. The group, which last year dumped malware it had <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2016\/08\/16\/everything-you-need-to-know-about-the-nsa-hack-but-were-afraid-to-google\/\">allegedly stolen from The Equation Group, a hacking team associated with the NSA<\/a>, <a target=\"_blank\" href=\"https:\/\/techcrunch.com\/2017\/04\/08\/shadow-brokers-be-back\/\">posted new files<\/a> over the weekend and followed up today with a dump of Windows exploits.<\/p>\n<p>The latest files contain tools apparently designed to access Windows machines, as well as\u00a0slideshows documenting the targeting of banking systems.<\/p>\n<p>\u201cIs being too bad nobody deciding to be paying theshadowbrokers for just to shutup and going away. TheShadowBrokers rather being getting drunk with McAfee on desert island with hot babes,\u201d the group wrote in a <a target=\"_blank\" href=\"https:\/\/github.com\/misterch0c\/shadowbroker\">post<\/a> announcing the file release.<\/p>\n<p>Security researchers analyzing the files say that The Equation Group targeted <a target=\"_blank\" href=\"https:\/\/twitter.com\/GossiTheDog\/status\/852881586433531905\">VPNs and firewalls<\/a> to gain access to banking systems. The newly published exploits appear to\u00a0primarily target older versions of Windows, but some appear to be as current as Windows 8.<\/p>\n<p>Researchers are still combing through the files to see what\u2019s fresh and what isn\u2019t. So far, some of the most significant exploits appear to center around SWIFT Alliance Access (SAA), a flagship financial messaging interface used by banks around the world. The files\u00a0suggest that the NSA is actively targeting\u00a0international banking\u00a0bureaus, specifically through a widespread global\u00a0protocol for secure financial messaging and transactions. According to the files, two\u00a0NSA programs known as\u00a0<a target=\"_blank\" href=\"https:\/\/medium.com\/@msuiche\/the-nsa-compromised-swift-network-50ec3000b195\">JEEPFLEA_POWDER and\u00a0JEEPFLEA_MARKE<\/a>T exist to specifically compromise\u00a0SWIFT bureaus and services.<\/p>\n<p>TechCrunch has contacted Microsoft and SWIFT for comment and will update if we hear back.<\/p>\n<p><strong>Update:\u00a0<\/strong>A Microsoft spokesperson told TechCrunch that\u00a0\u201cWe are reviewing the report and will take the necessary actions to protect our customers.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"680\" height=\"383\" src=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=680\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=680 680w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg 1360w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=150 150w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=300 300w, https:\/\/tctechcrunch2011.files.wordpress.com\/2014\/05\/china-windows8.jpg?w=768 768w\" sizes=\"(max-width: 680px) 100vw, 680px\" \/>&nbsp;It&#8217;s been several months since their last major exploit, but the hacking group dubbed Shadow Brokers is back. The group, which last year dumped malware it had allegedly stolen from The Equation Group, a hacking team associated with the NSA, posted new files over the weekend and followed up today with a dump of Windows exploits. The latest files contain tools apparently designed to&hellip; <a href=\"https:\/\/techcrunch.com\/2017\/04\/14\/the-shadow-brokers-april-exploits-swift-windows\/?ncid=rss\">Read More<\/a><\/p>\n<div class=\"feedflare\">\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:2mJPEYqXBVI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=2mJPEYqXBVI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:7Q72WNTAKBA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=7Q72WNTAKBA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:yIl2AUoC8zA\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=yIl2AUoC8zA\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:-BTjWOF_DHI\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=HVqYNP1SkLE:j-C55b9D2mo:-BTjWOF_DHI\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:D7DqB2pKExk\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?i=HVqYNP1SkLE:j-C55b9D2mo:D7DqB2pKExk\" border=\"0\"><\/img><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?a=HVqYNP1SkLE:j-C55b9D2mo:qj6IDK7rITs\"><img decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~ff\/Techcrunch?d=qj6IDK7rITs\" border=\"0\"><\/img><\/a>\n<\/div>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"http:\/\/feeds.feedburner.com\/~r\/Techcrunch\/~4\/HVqYNP1SkLE\" height=\"1\" width=\"1\" alt=\"\"\/> <\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-338417","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338417","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=338417"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/338417\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=338417"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=338417"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=338417"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}