{"id":345075,"date":"2017-06-16T17:40:38","date_gmt":"2017-06-16T09:40:38","guid":{"rendered":"https:\/\/www.macrumors.com\/2017\/06\/16\/apple-escapes-mention-wikileaks-cia\/"},"modified":"2017-06-16T17:40:38","modified_gmt":"2017-06-16T09:40:38","slug":"apple-devices-escape-mention-in-wikileaks-latest-vault-7-cia-hacking-documents","status":"publish","type":"post","link":"https:\/\/people.utm.my\/asmawisham\/apple-devices-escape-mention-in-wikileaks-latest-vault-7-cia-hacking-documents\/","title":{"rendered":"Apple Devices Escape Mention in WikiLeaks&#8217; Latest &#8216;Vault 7&#8217; CIA Hacking Documents"},"content":{"rendered":"<p>Wikileaks yesterday published its latest round of allegedly leaked CIA documents, detailing aspects of the U.S. agency&#8217;s &#8220;<a href=\"https:\/\/wikileaks.org\/vault7\/#Cherry%20Blossom\">Cherry Blossom<\/a>&#8221; firmware modification program, which uses modified versions of router firmware to turn networking devices into surveillance tools.<\/p>\n<p>The document is the latest in WikiLeaks&#8217; &#8220;Vault 7&#8221; series of publications on CIA hacking methods. Previous leaks have detailed the agency&#8217;s targeting of <a href=\"https:\/\/www.macrumors.com\/2017\/03\/07\/wikileaks-cia-ios-exploits\/\">iOS devices<\/a> and <a href=\"https:\/\/www.macrumors.com\/2017\/03\/23\/wikileaks-continues-vault-7-mac-cia\/\">Macs<\/a>, while this manual relates specifically to network routers: Once installed, the Cherry Blossom program can be used to monitor internet traffic, crawl for passwords, and redirect the target user to a particular website.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/cdn.macrumors.com\/article-new\/2017\/03\/wikileaks_cia.jpg\" alt=\"\" width=\"700\" height=\"290\" class=\"aligncenter size-full wp-image-553214\"\/><br \/>The manual also describes how CIA agents might install the modified firmware. &#8220;In typical operation, a wireless device of interest is implanted with Cherry Blossom firmware, either using the Claymore tool or via a supply chain operation.&#8221; While documents have not been made public that detail the &#8220;Claymore&#8221; tool, the latter tactic refers to the practice of intercepting the target device somewhere between the factory and the end user.<\/p>\n<p>The document lists several network products as susceptible to its hacking protocol, including devices from Asus, Belkin, Buffalo, Dell, DLink, Linksys, Motorola, Netgear, Senao, and US Robotics. Apple&#8217;s AirPort networking equipment does not appear on the list, however.<\/p>\n<p>The CIA has struggled to penetrate Apple&#8217;s network router hardware in the past due to a combination of the company&#8217;s robust encryption and its use of proprietary hardware. Previous <a href=\"https:\/\/wikileaks.org\/ciav7p1\/cms\/page_14588150.html\">Harpy Eagle<\/a> documents published by Wikileaks show apparently unsuccessful efforts to &#8220;gain root access on an Apple Airport Extreme and Time Capsule via local and\/or remote means to install a persistent rootkit into the flash storage of the devices&#8221;.<\/p>\n<p>The Cherry Blossom document dates to 2012, so it&#8217;s likely CIA methods have moved on in an effort to keep up to date with changing networking hardware. In a response the same day that the iOS device hacking efforts came out, Apple said that many of the vulnerabilities in that leak were <a href=\"https:\/\/www.macrumors.com\/2017\/03\/07\/apple-wikileaks-vault-7-patched\/\">already patched<\/a>. Apple reportedly <a href=\"https:\/\/www.macrumors.com\/2016\/11\/21\/apple-ceases-airport-wireless\/\">ceased development<\/a> of its AirPort networking devices last year.<\/p>\n<p><small>Note: Due to the political nature of the discussion regarding this topic, the discussion thread is located in our <a href=\"https:\/\/forums.macrumors.com\/forumdisplay.php?f=47\">Politics, Religion, Social Issues<\/a> forum. All forum members and site visitors are welcome to read and follow the thread, but posting is limited to forum members with at least 100 posts.<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Wikileaks yesterday published its latest round of allegedly leaked CIA documents, detailing aspects of the U.S. agency&#8217;s &#8220;Cherry Blossom&#8221; firmware modification program, which uses modified versions of router firmware to turn networking devices into surveillance tools. The document is the latest in WikiLeaks&#8217; &#8220;Vault 7&#8221; series of publications on CIA hacking methods. Previous leaks have [&hellip;]<\/p>\n","protected":false},"author":5817,"featured_media":345076,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[68,69,59,26],"class_list":["post-345075","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-apple","tag-macrumors","tag-media","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/345075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=345075"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/345075\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media\/345076"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=345075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=345075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=345075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}