iTnews
  • Home
  • News
  • Technology
  • Security

Cisco, Juniper, Huawei devices on NSA’s hacked list

By Staff Writer on Dec 30, 2013 8:53AM
Cisco, Juniper, Huawei devices on NSA’s hacked list

NSA’s catalogue of owned tech.

The U.S. National Security Agency has compromised multiple makes of switches and routers manufactured by market leaders Cisco Systems, Juniper Networks and Huawei, according to documents leaked to Der Speigel magazine.

The NSA’s crack hacking unit, Tailored Access Operations, routinely refers to a 50-page list of hardware and software products for which the NSA has tools to gain unauthorised and covert access when looking to tap a target. These include industry standard switches and routers and the firmware of most major makes of hard drives.

The report, filed by TOR contributor Jacob Applebaum - known to be a confidant of NSA whistleblower Edward Snowden - reveals that most of the hacking tools used by the NSA targeted devices that were several years old and that many of them were available at a price - some up to $250,000.

While SC Magazine has not seen the list directly, this would suggest that the backdoors are gained without the cooperation of the manufacturers. Further, while the NSA employs its own hackers to build some of these tools, the price tags might suggest that it purchases some from online malware markets.

The Der Spiegel story was published as the world’s information security experts met at the 30th congress of the Chaos Computer Club conference in Hamburg.

The keynote speech for the 2013 conference was provided by journalist Glenn Greenwald, a second figure that has gained access to Edward Snowden’s trove of documents.

Among the most recent NSA revelations:

  • The NSA has, among other feats, compromised the Blackberry Enterprise Server (BES) software trusted by business executives and government officials for the secure transmission of email over mobile networks.
  • The NSA’s toolbox includes a device that mimics a mobile phone tower for the tapping of mobile calls and data.
  • Most of the malware used by the NSA targets the BIOS of a device such that it runs as soon as the machine is turned on.
  • The NSA can intercept Windows crash reports sent by a user’s machine to Microsoft.
  • The NSA is able to intercept physical computing devices ordered for home delivery by its targets, installing its malware prior to the computers being shipped to the target’s door.
  • The NSA has targeted in-flight WiFi as a means of further interception.
  • The NSA paid RSA Security a $10 million fee to install its software into RSA's security products.
Got a news tip for our journalists? Share it with us anonymously here.

Copyright © SC Magazine, Australia

Tags:
backdoorciscohuaweijunipernsasecuritysurveillance

Partner Content

Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content Security: Understanding the fundamentals of governance, risk & compliance
Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Promoted Content Accenture and Google Cloud team up to create a loveable, Australian-first, renewable energy product
Digital signatures propel Australian Unity with rapid time to value
Digital signatures propel Australian Unity with rapid time to value
Avoiding CAPEX by making on-premise IT more cloud-like
Promoted Content Avoiding CAPEX by making on-premise IT more cloud-like

Sponsored Whitepapers

Free eBook: Digital Transformation 101 – for banks
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
Planning before the breach: You can’t protect what you can’t see

Events

  • Forrester Technology & Innovation Asia Pacific 2022
By Staff Writer
Dec 30 2013
8:53AM
0 Comments

Related Articles

  • US agencies accuse China of attacking telcos and network providers
  • Meraki firewalls blocked Office365 traffic as attempted intrusion
  • Cisco small business routers need urgent patch
  • Cisco data centre management software needs vulnerabilities patched
Share on Twitter Share on Facebook Share on LinkedIn Share on Whatsapp Email A Friend

Most Read Articles

Services Australia sets changeover date for myGov

Services Australia sets changeover date for myGov

NSW Police dumps Bezos-backed Mark43 from core systems overhaul

NSW Police dumps Bezos-backed Mark43 from core systems overhaul

Australian court finds insurer not liable for ransomware clean-up costs

Australian court finds insurer not liable for ransomware clean-up costs

NBN Co proposes to axe CVC across all plans by mid-2026

NBN Co proposes to axe CVC across all plans by mid-2026

Digital Nation

Domino’s invests in observability for zero contact delivery
Domino’s invests in observability for zero contact delivery
Metaverses on the agenda for Dominello, Husic ministerial meeting
Metaverses on the agenda for Dominello, Husic ministerial meeting
COVER STORY: How KPMG, Mirvac and ASX use blockchain to build trust in the property sector
COVER STORY: How KPMG, Mirvac and ASX use blockchain to build trust in the property sector
Australia will lose 11 percent of jobs to automation by 2040: Forrester
Australia will lose 11 percent of jobs to automation by 2040: Forrester
Criteo to fork out $94.7m for consent breaches
Criteo to fork out $94.7m for consent breaches
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.
Your use of this website constitutes acceptance of nextmedia's Privacy Policy and Terms & Conditions.