Wikileaks releases CIA's Marble: Malware obfuscation tools

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by vxxzy on Friday March 31, 2017 @02:52PM (#14006915)

What would be the advantage to making your exploits appear to come from other countries? What do we gain from this? It feels like an instigation.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by rdtsc on Friday March 31, 2017 @03:02PM (#14007030)

There is a huge advantage to do that. False flag attacks are one of the tried and true methods of intelligence agencies since ancient times.

For example the official pretext for WWII was started as a false flag: https://en.wikipedia.org/wiki/Gleiwitz_incident US did it at the start of Vietnam War: https://en.wikipedia.org/wiki/Gulf_of_Tonkin_incident

We gain a lot from this. We can for example manufacture "Russian hysteria" - "Look we found a Russian rootkit on a DNC server". We can attack our allies and then make it look like the Chinese did it, and so on. It is immensely useful.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by jlgray on Friday March 31, 2017 @03:36PM (#14007356)

Someone benefits, but it is not "we"

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by shuntress on Friday March 31, 2017 @03:56PM (#14007549)

>"Look we found a Russian rootkit on a DNC server"

Implying a 'Russian rootkit' was planted in a false flag operation?

So the CIA pretended to be Russia helping to get Trump elected -- why?

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by rdtsc on Friday March 31, 2017 @04:22PM (#14007791)

Did they pretend to be Russia? I didn't see any evidence. They seemed to have heavily invested in this capability though. Why waste time and money if they don't plan on using it?

Why do you think they might want to pretend to be someone else?

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by funnuf on Friday March 31, 2017 @04:43PM (#14007988)

Guaranteed Victory? If Hillary won, they win. If she loses, they get Trump impeached, and they win.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by tehlike on Friday March 31, 2017 @03:25PM (#14007259)

one powerful tool in our arsenal, then. Sounds like something that could foster world wars :)

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by jwtadvice on Friday March 31, 2017 @02:56PM (#14006954)

Well this is the CIA.

It can confuse the attribution so that trust is spoiled, so that energy is spend uselessly, so that another country takes the blame, for false flag attacks to justify other strategic moves.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by empath75 on Friday March 31, 2017 @02:56PM (#14006963)

Doesn't necessarily have to be instigation -- could just be misdirection. If you're targeting Russians, then making malware that looks like Russian hackers seems like a no brainer, if you don't want to attract attention from intelligence services.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by freeflight on Friday March 31, 2017 @04:36PM (#14007942)

Especially when you, or a partner service of yours, has access to compromised servers from that region to spread said malware from a server that can be attributed to "the bad guys™".

Like it's the case with the NSA: http://www.networkworld.com/article/3137065/security/shadow-...

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by 27182818284 on Friday March 31, 2017 @03:06PM (#14007066)

Misleading information is a weapon in any nation's arsenal. I have to say I'm a little taken aback and almost feel like your comment might be trolling.

[ Parent | on HN ]

Re:Wikileaks releases CIA's Marble: Malware obfuscation tools by lightbyte on Friday March 31, 2017 @03:27PM (#14007277)

I dont actually see anything in this that would indicate they could do that or that they wanted to. It appears to be 100% conjecture from Wikileaks.

[ Parent | on HN ]