Documents
The NSA and GCHQ’s QUANTUMTHEORY Hacking Tactics
Mar. 12, 2014
TOP SECRETHHCOMINTHRELTO USA, FVEWIZDSED1 D8
010 SI
'Er
gin vclopment Conference
-. SIG DEV: Disemrery in the Cyber Age
..-1
QUANTUMTHEORY
s32x
TOP SEC HETIFCOMINTIFHELTO USA,
TOP SECRETHHCOMINTHRELTO USA, FVEWIZDSED1 D8
010 SI
'Er
gin vclopment Conference
-. SIG DEV: Disemrery in the Cyber Age
..-1
QUANTUMTHEORY
s32x
TOP SEC HETIFCOMINTIFHELTO USA,
TOP SECRETIICOMINTIIREL TO USA,
(U) Classification of Presentation
- This presentation is classified:
HJSEQM FVEV
I Zrlf-'-tiTOP SEGRETHCOMINTHRELTO usn, FvEYxx?EJ?2o1os
TOP SECRETIICOMINTIIREL TO USA,
(U) Classification of Presentation
- This presentation is classified:
HJSEQM FVEV
I Zrlf-'-tiTOP SEGRETHCOMINTHRELTO usn, FvEYxx?EJ?2o1os
TOP SECRETIICOMINTIIREL TO USA,
(U) What is QUANTUMTHEORY
. Nothing to do with "Quantum Computing"
I Protocol injection technique
- Passive
I Active
- Not Man--in--the--Midd|e
- But can be used to gain that position
I Man-on--the--Side
TOP SECRETIICOMINTIIREL TO USA,
(U) What is QUANTUMTHEORY
. Nothing to do with "Quantum Computing"
I Protocol injection technique
- Passive
I Active
- Not Man--in--the--Midd|e
- But can be used to gain that position
I Man-on--the--Side
TOP SECRETIICOMINTIIREL TO USA, D8
(U) Man on the Side?
NSAW
. FIOC
Operator
TOP SECRETHCOMINTHRELTO USA.
TOP SECRETIICOMINTIIREL TO USA, D8
(U) Man on the Side?
NSAW
. FIOC
Operator
TOP SECRETHCOMINTHRELTO USA.
TOP SECRETIICOMINTIIREL TO USA,
(C) Components of QUANTUM Architecture
. TURMOIL
(or LPT, LPT--D, what else can you kludge for cough.. NINJANIC)
I Passive Sensor
. TURBINE
- Active Mission Logic of Remote Agents
. ISLANDTRANSPORT
- Messaging Fabric
. SURPLUSHANGER
I High-->Low diodes
- STRAIGHTBIZARRE or DAREDEVIL
- lmplantl Shooter
. 3 .
- . .
..
TOP SECRETHCOMINTHREL To USA, Fvevrriofi?oi as I
TOP SECRETIICOMINTIIREL TO USA,
(C) Components of QUANTUM Architecture
. TURMOIL
(or LPT, LPT--D, what else can you kludge for cough.. NINJANIC)
I Passive Sensor
. TURBINE
- Active Mission Logic of Remote Agents
. ISLANDTRANSPORT
- Messaging Fabric
. SURPLUSHANGER
I High-->Low diodes
- STRAIGHTBIZARRE or DAREDEVIL
- lmplantl Shooter
. 3 .
- . .
..
TOP SECRETHCOMINTHREL To USA, Fvevrriofi?oi as I
TOP SECRETIICOMINTIIREL TO USA,
(C) Legacy QUANTUMTHEORY techniques
. OUANTUMINSERT
- HTML Redirection
. QUANTUMSKY
. resets
I QUANTUMBOT
. IRC botnet hijacking
TOP SECRETIICOMINTIIREL TO USA,
(C) Legacy QUANTUMTHEORY techniques
. OUANTUMINSERT
- HTML Redirection
. QUANTUMSKY
. resets
I QUANTUMBOT
. IRC botnet hijacking
TOP SECRETIICOMINTIIREL TO USA,
(U) New Hotness
I QUANTUMBISCUIT
. Redirection based on keywork
. Mostly HTML Cookie Values
I QUANTUMDNS
- DNS Hijacking
- Caching Nameservers
. QUANTUMBOT2
. Combination of for web based
Command and controlled botnets
TOP SECRETIICOMINTIIREL TO USA,
(U) New Hotness
I QUANTUMBISCUIT
. Redirection based on keywork
. Mostly HTML Cookie Values
I QUANTUMDNS
- DNS Hijacking
- Caching Nameservers
. QUANTUMBOT2
. Combination of for web based
Command and controlled botnets
TOP SECRETIICOMINTIIREL TO USA,
(U) Experimental
. QUANTUMCOPPER
. File download disruption
. QUANTUMMUSH
I Virtual HUFFMUSH /Targeted Spam Exploitation
I QUANTUMSPIM
. Instant Messaging (MSN chat, XMPP)
I OUANTUMSQUEEL
- Injection into persistent database connections
. OUANTUMSQUIRREL
I Truly covert infrastructure, be any IP in the pgvorldi
TOP SECRETIICOMINTIIREL TO USA,
(U) Experimental
. QUANTUMCOPPER
. File download disruption
. QUANTUMMUSH
I Virtual HUFFMUSH /Targeted Spam Exploitation
I QUANTUMSPIM
. Instant Messaging (MSN chat, XMPP)
I OUANTUMSQUEEL
- Injection into persistent database connections
. OUANTUMSQUIRREL
I Truly covert infrastructure, be any IP in the pgvorldi
SEGRETIICOMINTIIREL TO USA,
QUANTUMDEFENSE
.
TAO C3
5 .5 _mirror5
anysitacnm C2
TAO 1
-1 Shooter-
SEGRETIICOMINTIIREL TO USA,
QUANTUMDEFENSE
.
TAO C3
5 .5 _mirror5
anysitacnm C2
TAO 1
-1 Shooter-
SECRETIICOMINTIIREL TO USA,
(C) Where/What can you QUANTUM
- Menwith Hi|| Station (US-J--759,
- Operational: CHNSERT, Q--SKY, Q-DNS, Q-BISCUIT, Q--BOT
I Tested: Q-COPPER, Q-SQUIRREL, Q-BOT2
. Misawa AFB
-
. INCENSOR (DS--300) -- with help from GCHQ
- Operational: Q--BOT, CHNSERT
- Tested: Q--SQUEEL,
I NIPRNET Gateways
-
- Coming
. SMOKEYSINK
. SARATOGA
45TOP SECRETHCOMINTHREL To usa, FvEw?o??o1 as
SECRETIICOMINTIIREL TO USA,
(C) Where/What can you QUANTUM
- Menwith Hi|| Station (US-J--759,
- Operational: CHNSERT, Q--SKY, Q-DNS, Q-BISCUIT, Q--BOT
I Tested: Q-COPPER, Q-SQUIRREL, Q-BOT2
. Misawa AFB
-
. INCENSOR (DS--300) -- with help from GCHQ
- Operational: Q--BOT, CHNSERT
- Tested: Q--SQUEEL,
I NIPRNET Gateways
-
- Coming
. SMOKEYSINK
. SARATOGA
45TOP SECRETHCOMINTHREL To usa, FvEw?o??o1 as
TOP SECRETHECOMINTIEREL TO USA, FVEWHEDSED1 D8
Questions?
TOP SECRETHECOMINTIEREL TO USA, FVEWHEDSED1 D8
Questions?