#statesponsoredmalware โ Public Fediverse posts
Live and recent posts from across the Fediverse tagged #statesponsoredmalware, aggregated by home.social.
-
CW: #infosec ecosystems
One thing that is great about the threat intelligence gathering community is that simple things can feed known and unknown exploits, from ONE ENDPOINT, into the greater ecosystem to engineer fixes & mitigations FOR THE WHOLE ECOSYSTEM.
Keep this in mind when you BURN your #zerodays on me, for nothing. ๐
Ta! ๐คฃ
#StateSponsoredMalware ๐ ๐ฅ๐ง#investigations
#GammaGroup๐ค#Meta๐๐๐ฅ๐ง
#RTDNA #infosec reporting ๐๐ง -
One thing in #amer you _never_ hear about is how #GammaGroup's #FinFisher #FinSpy #Finsky is WAAAY WORSE than #NSOGroup's #Pegasus but do hear about their competition alternatives, #paragon
#RTDNA #infosec #SpyWare #StateSponsoredMalware #SSM #journalism
-
WOT a great video illustrating what #StateSponsoredMalwareโข ( #SSMโข ) from #GammaGroup does to your devices.
-
CW: #uspol triage #news summary
A quick #news triage for the last month + summary:
ยน Removal of #Oversight at multiple US institutions checking Government Fraud & Abuse
ยฒ Checks & Balance of Court vs. Executive Power under attack & under the microscope
ยณ #RNC #GishGallop technique to ' spray ' the #news with B.S. , i.e. distraction to grab headlines to hide from the larger coup-in-progress dismantle government issues on the rise
โด Usage of #StateSponsoredMalware increases
โต Attacking of #EU & N.AMER partners
โถ Attack on #CivilRights of #AMER continues
Did I miss anything else?
-
I wonder when more people in the #press will call out Mark's #segregationstrategy in the largest #malware software pusher on #SocialMedia & how 5/6th of the world isn't on #Meta ๐๐
Perhaps they could ask about the use of #GammaGroup's #FinFisher #FinSpy #Finsky software used for targeting users at around a 250k run rate since 2015 & how that's a key user acquisition strategy software component wise but is never mentioned for some reason in the #press as a key component of ' non-organic growth ' but basic racketeering ( #RICO ) ยฏ\_(ใ)_/ยฏ
#infosec #KiwiFarmsClone site #Meta #FacebookGroups #StalkerForums #StateSponsoredMalware use cases
-
CW: #infosec song quiz about #StateSponsoredMalware from #GammaGroup
Katey Perry wrote a song about #GammaGroup's #FinFisher #FinSpy #Finsky
Bonus points for calling out the song!
#infosec song quiz about #StateSponsoredMalware from #GammaGroup
-
#Meta, #Telegram & #Discord is a hub of coordination for transnational gangs coordinating #stalking, Break & Entering ( #miniWaterGate ) using #StateSponsoredMalware by #GammaGroup's #FinFisher #FinSpy #Finsky linked to #stalkerforums like #KiWiFarms clones but are organized on #Meta, specifically, for multiple decades now.
High profile targeting of high value subjects makes the #news but their bread and butter is targeting anyone they want, especially #SiliconValley workers linked to the under #Fortune100 companies.
#infosec #GreyMarketCALEA software
-
CW: #infosec #GreyMarketCALEA #attaccc proxy servers on InfoSec.Exchange
Hmm, two infrastructure IPs behind InfoSecExchange used for attaccc's today from fast.ly & bunny.net. โฃ๏ธ๐
๐ง
Fast.ly โฃ๏ธโ ๏ธ๐ 151.101.43.52
Bunny.Net โฃ๏ธโ ๏ธ๐ 143-244-50-84.bunnyinfra.net
#GreyMarketCALEA #infosec
#investigations #StateSponsoredMalware #GammaGroup #FinFisher #FinSpy #RTDNA #news -
It's for mass surveillance, use of felons coordinating of Meta to target someone for assaults/murder/theft type targeting, physical property theft ( like WaterGate), breaking & entering coordination, targeting by gps the targeting of vehicle car wrecks, etc, as a used by felons type of non-law enforcement kind of thing in the #CALEA #CALEAGreyMarket, when used against ' the press ' or anyone else they target.
#GammaGroup #FinFisher #FinSpy #Finsky
#Meta #GangStalkers & use this software.
It's installed via #GooglePlayStore & #AppleAppStore with #MITM targeting as well as with a phone call or text message from an infected device.
#StateSponsoredMalwareCurrently there are some REALLY misconfigured #GammaGroup clients which when called will infect EVERYTHING from you phone to your computer to tablet. It's basically digital rape & slavery. Basically.
Luckily on #Android OS it's super easy to detect without software because it is so overt, not covert.
#RTDNA #infosec #StateSponsoredMalwareโข
#NSOGroup & #GammaGroup are the most commonly used varieties in USA.
-
Attributes of these #identitytheft rings include:
ยน #cryptowallettheft
ยฒ #breakingandentering coordination
ยณ #stalking
โด #theft#GammaGroup #FinFisher #FinSpy #Finsky #StateSponsoredMalwareโข #SSMโข #CALEA #CALEAGreyMarket #RTDNA #news
-
BOLO for #OfficerProxy
#OfficerProxy has been known to hide #IdentityTheftRings & #GangStalkers using #OfficerProxies access to this #CALEA #StateSponsoredMalware access to #GammaGroup's #FinFisher #FinSpy #Finsky #malware by #FacebookGroups organizing their targeted #IdentityTheft using #FakeProfiles of their targets.
Be aware that some #OfficerProxies are getting thousands of dollars of ' kickbacks for access ' for their criminal #Facebook leverage #OrganizedCrimeRings in multiple states and cities.
#InternalAffairs #investigations
#infosec #Fortune1000 #CorporateEspionage #CISO #TCPDUMP #MetaUsers ๐จโโ๏ธ๐ฉโโ๏ธโ๏ธ๐ฎ
-
Today is also a remeberence day of how #StateSponsoredMalware from #GammaGroup is used for a #masssurveillance #GreyMarketCALEA #DigitalSlaverySystem but also is being watched by other #StateSponsoredMalware that competes with #FinFisher #FinSpy #Finsky who's 100's of MILLIONS of installs of its clients in #AMER is used for #cryptowallettheft, #identitytheft , #propaganda & #GangStalking purposes by #OfficerProxys', luckily, #InternalAffairs can review who accessed what, when & where, for public reviews ๐๐ง.
Every Day is #infosec
๐
๐ฌ
โฃ๏ธ๐ฒโฃ๏ธ
๐จโโ๏ธ #CALEA #TCPDUMP #watchDay ๐ฉโโ๏ธ -
#GammaGroup clients use
๐ UDP port 123 ๐
as default #RedTeam data #exfiltration ports
#gammagroup #finfsher #finspy #infosec #memes
#BlueTeam
#statesponsoredmalware โฃ๏ธ๐คณ๐โฃ๏ธUpdate: Add logging before implementing BLOCKING the #exfil shim, obviously. โฃ๏ธ๐คณ๐๐โฃ๏ธ๐๐ง
-
What iF there was an 18-24yr old group of new voters, let's say 3M of them, & #StateSponsoredMalware was used to ' force a vote a certain way '.
That would definitely be on the ledger of investigations, for sure, right Brazil? ๐๐คจ
#uspol #SSMโข #VoterIntimidation #SwingStates #Elwction2024 ๐๐คจ
#infosec #delivers_dtignite_com
#GammaGroup #FinFisher #FinSpy #Finsky -
The more you know about how the #GreyMarket of #CALEA #malware is whitelisted #StateSponsoredMalwareโข from #GammaGroup #FinFisher #FinSpy #Finsky which is already installed on 100's of MILLIONS of devices in #AMER already.... the better.
๐
๐ฌ -
Now do #GammaGroup's #FinSpy #FinFisher #Finsky which is 1000% worse in the #malware abuse in #GreyMarkets usage in #infosec ๐ค
#StateSponsoredMalwareAudits #StateSponsoredMalwareโข โฃ๏ธโ
-
They should CC: #GammaGroup . Com's #FinFisher #FinSpy #Finsky also
#StateSponsoredMalwareโขโโฃ๏ธ๐๐ง
-
Sure. Depends on the OS.
I focus on Android OS 10, 11 & 12 currently #VirusTota'ing the client #FinFisher, #FinSpy & #finsky & their attaccc proxy servers also.
Android 13, 14, 15 for https://GammaGroup.Com client is on my roadmap this year & into next year though.
I've been super busy on other projects since this one is very charity work oriented in #infosec of #CALEA & #GreyMarket #CALEA software.
Occasionally I also post about #NSOGroup since they are a competitor to GammaGroup in the UK.
#StateSponsoredMalware
#WhitelistedMalware
#LawfulIntercept
#UnlawfulIntercept
#investigations -
Sounds like #GammaGroup's app, #FinFisher, #FinSpy, #Finsky used by Russian operatives in Florida.ru & Alabama.ru . โฃ๏ธ๐๐ง๐ฏ
-
CW: Any reason why these under $300 #Motorola phones you sell have #GammaGroup's #FinFisher #FinSpy #Finsky โฃ๏ธ๐๐ง preinstalled?
@[email protected]
@MOTOROLA
@[email protected]Any reason why these under $300 #Motorola phones you sell have #GammaGroup's #FinFisher #FinSpy #Finsky โฃ๏ธ๐๐งpreinstalled?
#infosec questions about #StateSponsoredMalware from the #UK
-
In the future the 1975 Church Committee hearings will replay in the 2020's and the findings will prove to be even worse in public hearings especially when the domestic #AMER from #Meta's #GangStalker forum #databreach hits the front pages of the domestic / international #news with the same response as per Meta usual.
#CALEA โฃ๏ธ๐๐ #Malware #audits โฃ๏ธ๐๐
#RTDNA #TorturePrograms #Meta โฃ๏ธ #StateSponsoredMalware โฃ๏ธ #CALEAMalware โฃ๏ธ #GreyMarket โฃ๏ธ #investigations โฃ๏ธ ๐๐๐
Don't forget the โป๏ธ๐จ๐ฅ๐ฒ #HistoryLoops #APnews ๐๐๐
#SIC ๐ค #HIC ๐ค โ๏ธ ๐ค ๐จโโ๏ธ๐ค๐ฉโโ๏ธ๐ค๐ฐ
-
The #investigation into the #CoIntelPro program side program of calling someone #CI ( #CounterIntelligence ) so that they can physically #torture you is under #investigationdiscovery & how #StateSponsoredMalwareโข from #GammaGroup is used to try to manage this #miniWaterGate operations, domesticly, in #AMER .
#Meta ๐๐ง #DoJ โ๏ธ๐ #CI
โ๏ธ๐ #CIA ๐๐ง
โ๏ธ๐ #FBI ๐๐ง
โ๏ธ๐#COPSProgram ๐๐ง
-
CW: Interesting #CALEA #GreyMarket usage of #StateSponsoredMalwareโข key capabilities & logged attributes
One of the key attributes of #StateSponsoredMalwareโข from #GammaGroup's #FinFisher #FinSpy #Finsky is understanding that it is a shim based mish mash of resident files that point to different parts of the other background services running.
Some are replaced stock system files modified to look like and are named the same as the original but are supplemented with additional API's that call the mutiple shims that has as it's main goal of getting complete persistence on your systems if it has not done so already.
๐ฉ๐ฉ๐ฉ๐ฉOne first sign is the battery drain this software uses. It has a weird side effect of NOT logging in this battery usage like normal applications and system. ๐ฉ๐ฉ๐ฉ๐ฉ
โ ๏ธ๐จโ ๏ธ๐จโ ๏ธ๐จโ ๏ธ ๐จโ ๏ธ๐จโ ๏ธ๐จ
This BATTERY DRAIN is a HUGE
first indicator of compromise.
โ ๏ธ๐จโ ๏ธ๐จโ ๏ธ๐จโ ๏ธ๐จโ ๏ธ๐จโ ๏ธ๐จSecond is checking the BACKGROUND programs running list. There are SEVERAL background programs that indicates you have been compromised by GammaGroup's software, especially on #Android , #IOS, #MacOS, #Windows, & #Linux.
There are attaccc features also which spread, from a library of PNGs with URL arrays embedded to their #malware services that launch attaccc's based on certain PSTN calls, web browsing & also MMS & SMS interactions.
For example, receiving an SMS or MMS can activate things on your computer or wireless device to do things like start a running process shim like start or restart specific services.
There is also a #MITM #ForcedMDM & #proxying ability to use your end point as an attaccc node completely behind the scenes without your intervention or knowledge unless you are logging your traffic which also could be bypassed also as has been seen previously. That is on purpose.
Continued..... #infosec #GreyMarket #CALEA #malware #investigations #RTDNA โฃ๏ธ๐๐ง
-
#StateSponsoredMalwareโข #SSMโข by #GammaGroup.Com does this also as their #FinFisher #FinSpy #Finsky product dubbed #TheEnemyOfTheInternet since the early 2010's as well as stream the screen in real time with the full disk access to the files, neatly force a #MITM #ForcedMDM #ForcedProxyNetwork on your device for easy fisher price type access to your compromised devices, passwords, all E2E services, online accounts, financial apps, messaging apps, SMS/MMS, iMessage, RCS, everything, from a small company that has 100's of MILLIONS of compromised devices, just on #Android alone, installed via the #GooglePlayStore & #AppleAppStore, infecting #Linux, #Windows, #MacOS, #Solaris, #IOS & more.
Seems like these ' new features ' are just a cover for the existing installs of this #spyware iF you look at it but, could be a product, locally exploited also, as a new built-in spyware package, as it reads now, for simple #ediscoverable things later in the #Fortune1000s & mom & pop businesses to worry about, especially when $_scenarios_list.xlsx plays out. ๐ฏ๐คฆโโ๏ธ๐คฆโโ๏ธ๐คฆโโ๏ธ๐คฆโโ๏ธ