Documents

The NSA and GCHQ’s QUANTUMTHEORY Hacking Tactics

Mar. 12 2014 — 1:00p.m.

/11
1/11

TOP SECRETHHCOMINTHRELTO USA, FVEWIZDSED1 D8 010 SI 'Er gin vclopment Conference -. SIG DEV: Disemrery in the Cyber Age ..-1 QUANTUMTHEORY s32x TOP SEC HETIFCOMINTIFHELTO USA,

TOP SECRETIICOMINTIIREL TO USA, (U) Classification of Presentation - This presentation is classified: HJSEQM FVEV I Zrlf-'-tiTOP SEGRETHCOMINTHRELTO usn, FvEYxx?EJ?2o1os

TOP SECRETIICOMINTIIREL TO USA, (U) What is QUANTUMTHEORY . Nothing to do with "Quantum Computing" I Protocol injection technique - Passive I Active - Not Man--in--the--Midd|e - But can be used to gain that position I Man-on--the--Side

TOP SECRETIICOMINTIIREL TO USA, D8 (U) Man on the Side? NSAW . FIOC Operator TOP SECRETHCOMINTHRELTO USA.

TOP SECRETIICOMINTIIREL TO USA, (C) Components of QUANTUM Architecture . TURMOIL (or LPT, LPT--D, what else can you kludge for cough.. NINJANIC) I Passive Sensor . TURBINE - Active Mission Logic of Remote Agents . ISLANDTRANSPORT - Messaging Fabric . SURPLUSHANGER I High-->Low diodes - STRAIGHTBIZARRE or DAREDEVIL - lmplantl Shooter . 3 . - . . .. TOP SECRETHCOMINTHREL To USA, Fvevrriofi?oi as I

TOP SECRETIICOMINTIIREL TO USA, (C) Legacy QUANTUMTHEORY techniques . OUANTUMINSERT - HTML Redirection . QUANTUMSKY . resets I QUANTUMBOT . IRC botnet hijacking

TOP SECRETIICOMINTIIREL TO USA, (U) New Hotness I QUANTUMBISCUIT . Redirection based on keywork . Mostly HTML Cookie Values I QUANTUMDNS - DNS Hijacking - Caching Nameservers . QUANTUMBOT2 . Combination of for web based Command and controlled botnets

TOP SECRETIICOMINTIIREL TO USA, (U) Experimental . QUANTUMCOPPER . File download disruption . QUANTUMMUSH I Virtual HUFFMUSH /Targeted Spam Exploitation I QUANTUMSPIM . Instant Messaging (MSN chat, XMPP) I OUANTUMSQUEEL - Injection into persistent database connections . OUANTUMSQUIRREL I Truly covert infrastructure, be any IP in the pgvorldi

SEGRETIICOMINTIIREL TO USA, QUANTUMDEFENSE . TAO C3 5 .5 _mirror5 anysitacnm C2 TAO 1 -1 Shooter-

SECRETIICOMINTIIREL TO USA, (C) Where/What can you QUANTUM - Menwith Hi|| Station (US-J--759, - Operational: CHNSERT, Q--SKY, Q-DNS, Q-BISCUIT, Q--BOT I Tested: Q-COPPER, Q-SQUIRREL, Q-BOT2 . Misawa AFB - . INCENSOR (DS--300) -- with help from GCHQ - Operational: Q--BOT, CHNSERT - Tested: Q--SQUEEL, I NIPRNET Gateways - - Coming . SMOKEYSINK . SARATOGA 45TOP SECRETHCOMINTHREL To usa, FvEw?o??o1 as

TOP SECRETHECOMINTIEREL TO USA, FVEWHEDSED1 D8 Questions?

Filters SVG