Tuesday, November 5, 2024
HomeHacksVault 7 Leaks:CIA Hacking Tool "Dumbo" Hack WebCams & Corrupt Video Recordings...

Vault 7 Leaks:CIA Hacking Tool “Dumbo” Hack WebCams & Corrupt Video Recordings – WikiLeaks

Published on

Malware protection

WikiLeaks Revealed New CIA Cyber Weapon called “Dumbo” that has been developed with Sophisticated functionality  to hacking Webcams and Corrupt Video Recordings by physical Accessibility Control .

This Physical Deployment done by Special Intelligence group called PAG (Physical Access Group) which is performing special Task to gain and exploit physical access to target computers in CIA field operations.

Few Days Before WikiLeaks revealed CIA Hacking Tools “Achilles, Aeris, SeaPea” Revealed to Hack Mac and Linux OS.

- Advertisement - SIEM as a Service

This intelligence Tool Executed from USB Thumb Drive once Gaining Physical Access of the Target Computer that running the Windows Operating System.

Once Dumbo Gaining access the Target System , it identify the devices that  installed with infected Systems such as webcams and microphones, either locally or connected by wireless (Bluetooth, WiFi) or wired networks.

Dumbo Execution Method

If the operator Physically  injects the Exploit into the Target machine via USB Thumb Drive, its will identified and stopped all the connected Devices such as recording, monitoring or detection of video/audio/network streams.

Dumbo will Log all the actions in logging file called “log.txt” and will also log all processes running at the start of its execution in a file called “proclist.txt” located in the same folder as the program’s execution.

According to the Document,Dumbo supports 32bit Windows XP, Windows Vista, and newer versions of Windows operating system. 64bit Windows XP, or Windows versions prior to XP, are not supported.

Operator of this Malware can creating fake or destroying actual evidence of the intrusion operation by deleting and Manipulating the recordings.

Avoid the action that gets recorded , Manual suggest  to turn of the Anti Virus by the Operator.

Camera And Microphone

Since CIA Tool infect the Windows Operating systems , it showing the list of Camera that Connected with Device.

Operator can select the camera to taking the desire action by using table of Process running in this target Computer and also it required System Level Privilege.

List of selected camera devices Displays with unique camera name and by default last camera detected as  selected to take the relevant action by operator.

Operator can able to do any kind of action with the selected Devices later infection done by the Dumbo.

Also it shows all the Microphones that muted and unmuted and also Selectively corrupted or delete recordings.

Dumbo can’t Perform its Malicious action if the Camera being used by other Program.

USB Thumb Drive should be remain Plugged into the Target computer to being Maintain the control the targeted Machine.

Previous CIA Leaked Tools by WikiLeaks

 Vault 7 Leaks : CIA Hacking Tools “Achilles, Aeris, SeaPea” Revealed to Hack Mac and Linux OS -WikiLeaks

Raytheon – Vault 7 Leaks : CIA Owned PoC Malware Development Surveillance Projects “UCL Under Raytheon” Leaked – WikiLeaks

HighRise – Vault 7 Leaks : CIA Android Ha Vault 7 Leaks : CIA Hacking Tools “Achilles, Aeris, SeaPea” Revealed to Hack Mac and Linux OS -WikiLeaks

Hacking Tool “HighRise” Steals Data From Compromised Android Phones via SMS – WikiLeaks

Gyrfalcon –  Vault 7 Leaks: CIA Hacking Tools “BothanSpy” and “Gyrfalcon” Steals SSH Credentials From Windows and Linux Computers – WikiLeaks

OutlawCountry – Vault 7 Leaks: CIA Malware “OutlawCountry” Controls Linux Machine and Redirect the Victims Traffic into CIA Controlled Machine – WikiLeaks

ELSA – Vault 7 Leaks: CIA Malware “ELSA” Tracking Geo-Location of WiFi Enabled Windows Computers – WikiLeaks

Brutal Kangaroo – CIA Hacking Tool “Brutal Kangaroo” Revealed to Hack Air-Gapped Networks by using USB Thumb Drives -WikiLeaks

CherryBlossom –  Wikileaks Revealed New CIA Wireless Hacking Tool “Cherry Blossom” Compromise Your Wireless Network Devices using MITM Attack

Pandemic –  New CIA Cyberweapon Malware “Pandemic” installed in Victims Machine and Replaced Target files where remote users use SMB to Download

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Telegram Bot Selling Phishing Tools to Bypass 2FA & Hack Microsoft 365 Accounts

A newly discovered phishing marketplace, ONNX Store, empowers cybercriminals to launch sophisticated attacks against...

Mobile Device Management Vendor Mobile Guardian Hacked

 Mobile Guardian, a leading Mobile Device Management (MDM) vendor, experienced unauthorized access to its...

Hunt3r Kill3rs Group claims they Infiltrated Schneider Electric Systems in Germany

The notorious cybercriminal group Hunt3r Kill3rs has claimed responsibility for infiltrating Schneider Electric's systems...