4 ms·
I wonder how they were able to make sure that it's the german government behind this. I've read the whole analysis but nothing really hinted at it. Binaries no
by eis 15y ago
I wonder how they were able to make sure that it's the german government behind this.
I've read the whole analysis but nothing really hinted at it.
Binaries not signed + no knowledge of how the infection is done + server in the USA which they said they didn't penetrate to look what's behind it.
I'm not doubting them, it would just be very interesting.
- matthiasjakel 15y agothere was a big public discussion about the government trojaner in germany. they government also has to report how often it is used. so you can be sure thats the work of some government part.
- eis 15y agoI can't follow your logic. I know about the discussion and the statistic reports but how does that proof that this every-day-trojan actually is controlled by the government?
- DasIch 15y agoThe first paragraph: > Dem Chaos Computer Club (CCC) wurde Schadsoftware zugespielt, deren Besitzer begründeten Anlaß zu der Vermutung hatten, daß es sich möglicherweise um einen „Bundestrojaner“ handeln könnte. Einen dieser Trojaner und dessen Funktionen beschreibt dieses Dokument, die anderen Versionen werden teilweise vergleichend hinzugezogen. Translates to: > The Chaos Computer Club (CCC) received malware, whose owners who had reason to believe that it could possibly be the "Federal Trojan". One of these and its function is described by this document, other versions have been used for comparisons. I guess they won't publish any more information to protect their sources.
- eis 15y agoYea. So they got it from people who believe it might be the federal trojan. No proof. I'm not saying it unlikely to be the federal trojan but if they had real proof, that would be so much bigger and could really damage the surveillance efforts.
- raphman 15y agoWe have no reason to suspect CCC's findings, but we can't confirm that this trojan was written by the German government. As far as we see, the only party that could confirm that would be the German government itself. [1] I guess they are right. However, the features implemented in this trojan horse (Skype wiretapping, taking screenshots, keylogging, etc.) certainly look like it is to be used for general wiretapping/espionage. Additionally, CCC has obtained copies/variants(?) from several sources. If guess these were found on computers of people who have reasons to suspect the German police is spying on them. Overall, I assume that all other explanations for the existance of this software are significantly less likely than it being a police wiretapping rootkit. Edit: FAZ (German) writes that the software was found on several harddrives that were connected to a certain police investigation. The software had been deleted from the disks but could be recovered [2]. I guess that these disks were confiscated based on search warrants and later returned to their owners. This makes me believe that the analyzed software is indeed the German police's Bundestrojaner. [1] http://www.f-secure.com/weblog/archives/00002249.html http://www.f-secure.com/weblog/archives/00002249.html [2] http://www.faz.net/aktuell/chaos-computer-club-der-deutsche-staatstrojaner-wurde-geknackt-11486538.html http://www.faz.net/aktuell/chaos-computer-club-der-deutsche-...