Author Topic: WikiLeaks Vault 7: CIA's "Pandemic" Tool Replaces Files with Malware  (Read 49 times)

0 Members and 1 Guest are viewing this topic.

Offline Gilbert

  • Updates Moderator
  • *
  • Posts: 31721
WikiLeaks Vault 7: CIA's "Pandemic" Tool Replaces Files with Malware
« Reply #1 on: June 02, 2017, 05:15:22 PM »
WikiLeaks Vault 7: CIA's "Pandemic" Tool Replaces Files with Malware
2 June 2017, 2:18 pm

WikiLeaks has released a new set of documents from its Vault 7 series, this time detailing a tool that the CIA allegedly uses to spread malware on a targeted organization's network. 

Appropriately called "Pandemic," the tool can install a file system filter driver on a network, replacing legitimate files with malicious payload when they are accessed remotely via the Server Message Block (SMB) protocol. 

"Pandemic does NOT//NOT make any physical changes to the targeted file on disk. The targeted file on the system Pandemic is installed on remains unchanged. Users that are targeted by Pandemic, and use SMB to download the targeted file, will receive the 'replacement' file," reads the tool's description. 

This makes this tool a rather interesting one to have since it is particularly difficult to identify infected systems. Since Pandemic replaces files while in transit, instead of modifying them on the device the malware is running on, the legitimate files remain unch... (read more)

Source: Softpedia News / Security

>> To obtain the full Softpedia Security News article, click the link in the first post line <<


Except where otherwise stated, all content, graphics, banners and images included © 2006 - 2018 Smokey Services™ -- All rights reserved
Design board graphics, banners and images by DSTM & PseFrank

This site does not store profiling-, tracking-, third-party and/or any other non-essential cookie(s) on client computers and is fully compliant with the EU ePrivacy Directive
Smokey's does not use any Web Analytics/Analysis Service, and also does not use any browser fingerprinting techniques

Smokey's also provides free fully qualified Log / Malware Analysis & Removal Help and System Health Checks