NSA Installed Malware on Hard Disks to Spy the World - Kaspersky Lab Exposes

Dhananjay Harkare

Dhananjay Harkare

@dhananjay-0OEUGZ Oct 26, 2024
World-famous Russian cyber security researchers at Kaspersky Lab have exposed the National Security Agency aka NSA, for cyberespionage. According to the findings published by researchers, US agency has developed a software toolkit which they reportedly installed on portable Hard Disk Drives and used it to eavesdrop on other nations. According to Kaspersky Lab, the campaign was carried out for about 14 years or possibly even for two decades and infected tens of thousands of computers of telecommunication providers, military, government, research institutions, media organisations etc. Researchers also claimed that they’ve found infected computers from about 30 countries including Russia, Iran, Pakistan, India, China, Syria, Algeria and others.

Kaspersky-Lab-The-Equation-Group-Findings

Though Kaspersky Lab denied to publicly name the country or organisation behind the spy-programme, it said the programme is closely linked to Stuxnet, belonging to NSA, which was earlier used to attack Iran’s Uranium facility. Reuters’ sources form NSA have confirmed that the findings are correct to their knowledge and also gave nod that NSA developed the technique to hide the spyware in Hard Disk Drives. NSA spokesman Vanee Vines said though he is aware of findings by Kaspersky, he won’t publicly comment on same. According to lead Kaspersky researcher Costin Raiu, spies hid the malicious code in firmware, something that launches every time the computer is powered on. For this, spies must’ve had access to source code, something for which NSA has its own ways, says a former intelligence operative. Victims of the spying-programme may be users of several HDD manufacturers including Western Digital, IBM, Samsung, Seagate, Toshiba, Micron etc. Surprisingly, many of these makers either didn’t have any knowledge of spying campaigns or they declined to comment.

In analogy with the encryption formulae used, Kaspersky Lab have named spies as "The Equation Group", which it believes is probably the most sophisticated cyber-attacks group in the world. The Equation Group also developed a computer virus named “Fanny” which might be used to scout out targets for Stuxnet in Iran. After all this, it would now be interesting to see NSA’s reply and if former-NSA employee Edward Snowden could comment on the same.

Source: #-Link-Snipped-# | #-Link-Snipped-#

Replies

Welcome, guest

Join CrazyEngineers to reply, ask questions, and participate in conversations.

CrazyEngineers powered by Jatra Community Platform

  • Keerthivasan Ravisankar

    Keerthivasan Ravisankar

    @keerthivasan-hrKQir Feb 17, 2015

    Does it affects computers who have Kaspersky Internet Security (KIS) in their systems?
  • Jatin Kumar

    Jatin Kumar

    @jatin-SWWqiE Feb 17, 2015

    Keerthivasan R
    Does it affects computers who have Kaspersky Internet Security (KIS) in their systems?
    i think it did ,because if they know it they surely exposed it before
  • Jatin Kumar

    Jatin Kumar

    @jatin-SWWqiE Feb 17, 2015

    why any indian's agenceis are not doing these cool stuff 😁😏
  • Rajni Jain

    Rajni Jain

    @rajni-E46Rlm Feb 17, 2015

    If Kaspersky is reveling about the malware, why don't they program their AV to remove the malware?
  • Jatin Kumar

    Jatin Kumar

    @jatin-SWWqiE Feb 17, 2015

    Rajni Jain
    If Kaspersky is reveling about the malware, why don't they program their AV to remove the malware?
    May be the virus is hardcoded or if not they surely have done it till now
  • micheal john

    micheal john

    @micheal-john-l1fIn3 Feb 17, 2015

    HDD manufacturers including Western Digital, IBM, Samsung, Seagate, Toshiba, Micron etc. Surprisingly, many of these makers either didn’t have any knowledge of spying campaigns or they declined to comment.
    HDD manufactures willing help NSA?
  • Dhananjay Harkare

    Dhananjay Harkare

    @dhananjay-0OEUGZ Feb 17, 2015

    micheal john
    HDD manufactures willing help NSA?
    Not really, I guess. They are probably more ignorant of such campaigns!
  • lal

    lal

    @lal-R60Xjx Feb 18, 2015

    #-Link-Snipped-#, It can't be removed that easily when the firmware of HDD itself is acting as the spyware. Kaspersky can't alter the HDD frimware no matter what it finds there, except "may be" defer it's operation.