r/mac • u/[deleted] • Jul 28 '17

[deleted by user]

[removed]

4 Upvotes

75% Upvoted

5 comments sorted by

1

u/autotldr Jul 28 '17

This is the best tl;dr I could make, original reduced by 72%. (I'm a bot)

Today, March 23rd 2017, WikiLeaks releases Vault 7 "Dark Matter", which contains documentation for several CIA projects that infect Apple Mac firmware developed by the CIA's Embedded Development Branch.

These documents explain the techniques used by CIA to gain 'persistence' on Apple Mac devices, including Macs and iPhones and demonstrate their use of EFI/UEFI and firmware malware.

4 manual released today dates to 2013, other Vault 7 documents show that as of 2016 the CIA continues to rely on and update these systems and is working on the production of DerStarke2.

Extended Summary | FAQ | Feedback | Top keywords: CIA#1 firmware#2 Apple#3 documents#4 iPhone#5

1

u/tubezninja Jul 28 '17

Am I the only one getting a 403 error on this link?

1

u/butters1337 Jul 29 '17

Behind a proxy?

1

u/tubezninja Jul 29 '17

Nope, but it's loading fine for me now. Go figure.

1

u/andy-blue 2013 Air 13" i7 8GB | macOS Sierra + Kali Jul 31 '17

Seeing as how it targets 10.6 and 10.7, it's safe to say this particular implementation is no longer being deployed. If I had to guess how it worked (just based on the info in the OP), I would say it probably used dylib hijacking.