WikiLeaks Revealed a new Document of CIA Hacking Tool called “Angelfire” which comprised of 5 integrated components that are used to Compromise the Windows Computers Especially Windows 7 and Windows XP.
Angelfire integrated componenets are Solartime, Wolfcreek, Keystone (previously MagicWand), BadMFS, and the Windows Transitory File system.
Few Day Before WikiLeaks Revealed Secret Cyber Operation Document called “ExpressLane” Against Their Intelligence Partners.
Angelfire is a Framework Designed by CIA that can load and execute custom implants (polymorphic multipartite virus) into the Targeting Windows Computer and infect partition boot sector.
Five comprised components are Performing Different Process with Angelfilre implant framework and it works on 32-bit and 64-bit versions of Windows XP and Windows 7, and on 64-bit versions of Windows Server 2008 R2.
These are the 5 Components comprised with Angelfire to infect the Windows Computer
Solartime helps to modify the partition boot sector to load some kernel code. This Modification leads to modifies the Windows boot process so that when Windows loads boot time device.
Above Solartime executes By helping of Wolfcreek kernel code. Wolfcreek can able to load other Drivers user-mode applications using its self-Loading Driver capability.
According to CIA Document, Keystone is responsible for starting user applications. Any application started by MW is done without the implant ever being dropped to the file system. In other words, a process created and the implant is loaded directly into memory. Currently, all processes will be created as svchost.
BadMFS is a covert file system that helps to store all drivers and implants that Wolfcreek will start. It uses the encryption and obfuscation techniques to avoid string or PE header scanning.
Finally, a new method called Windows Transitory File system helps to install Angelfire. CIA Document says the system allows an operator to create transitory files for specific actions including installation, adding files to Angelfire, removing files from Angelfire.
Vault 7 Leaks: CIA Hacking Tool “CouchPotato” Remotely Capture Videos & Images -WikiLeaks
Vault 7 Leaks: CIA Cyber Weapon “Dumbo” Hack WebCams & Corrupt Video Recordings – WikiLeaks
Hacking Tool “HighRise” Steals Data From Compromised Android Phones via SMS – WikiLeaks
OutlawCountry – Vault 7 Leaks: CIA Malware “OutlawCountry” Controls Linux Machine and Redirect the Victims Traffic into CIA Controlled Machine – WikiLeaks
North Korean hackers are estimated to have stolen a staggering $2.2 billion in 2024, up…
A staggering 17 million patient records, containing sensitive personal and medical information, have been stolen…
After a prolonged legal battle stretching over five years, WhatsApp has triumphed over NSO Group…
GBHackers come across a new ChatGPT-powered Penetration testing Tool called "PentestGPT" that helps penetration testers…
A new malware variant called Nunu Stealer is making headlines after being advertised on underground hacker forums…
A critical vulnerability has been identified in Siemens' User Management Component (UMC), which could allow…