Shadow Brokers, a group that last year released a load of exploits from the Equation Group which is suspected to be allied to the NSA, has released the password for an encrypted cache of files which it put online.
In a rambling political rant addressed to US President Donald Trump in response to the US air strikes on Syria, the group said "Be considering this our form of protest".
Among the tools released overnight are:
- the source code for the TOAST framework which the NSA has used to clean its tracks after an exploit;
- source code for a tool called PITCHIMPAIR which is used to penetrate servers; and
- a table of backdoors for servers, mostly in Europe, Asia and South America.
A researcher, who goes by the handle x0rz on Twitter, claimed that the cache also included a Solaris exploit.
{loadposition sam08}In August 2016, the Shadow Brokers released material that included NSA-created exploit tools.
NSA just lost control of its Top Secret arsenal of digital weapons; hackers leaked it.
— Edward Snowden (@Snowden) 8 April 2017
1) https://t.co/zleVbyBtE3
2) https://t.co/aKwdiNbrJA
However, it found no takers for these exploits when they were put up for sale.
In October, Shadow Brokers released a list of servers in various countries which had been compromised by the NSA for use in staging attacks.
In the overnight dump, a table of backdoors for servers, mostly in Europe, Asia and South America was published on GitHub by the Shadow Brokers.
TAO's TOAST framework used to clean Unix wtmp events, no logs no crime ? #opsec pic.twitter.com/XfeT0OH9Qp
— x0rz (@x0rz) 8 April 2017
In its message, the Shadow Brokers said: "Respectfully, what the f*** are you doing?TheShadowBrokers voted for you. TheShadowBrokers supports you. TheShadowBrokers is losing faith in you. Mr. Trump helping theshadowbrokers, helping you. Is appearing you are abandoning 'your base', 'the movement', and the peoples who getting you elected."
To support its claims, it said the evidence for this lay in:
"Goldman Sach (TheGlobalists) and Military Industrial Intelligence Complex (MIIC) cabinet;
"Backtracked on Obamacare;
"Attacked the Freedom Causcus (TheMovement);
"Removed Bannon from the NSC; and
"Increased US involvement in a foreign war (Syria Strike)."