Symantec: Cyber Espionage Group Used Tools Described in CIA ‘Vault 7’ Leak

Symantec has found that a cyber espionage group dubbed “Longhorn” has used tools and protocols specified in the Vault 7 leak of alleged CIA hacking devices.

The company said Monday Longhorn has used the tools and techniques to launch cyber attacks against an estimated 40 targets in 16 countries across the Middle East, Europe, Asia and Africa.

WikiLeaks published more than 7,000 webpages of documents in March on alleged CIA-backed hacking materials used to gain access to computers, smartphones and other personal devices.

Symantec said in its study the “close similarities” in the technical specifications, development timelines, cryptographic protocols and anti-detection measures between Longhorn’s activities and the Vault 7 documents indicate they can be attributed to the same group.

The study notes Longhorn has been active since 2011 and has launched attacks against governments, international organizations and targets in the financial, telecommunications, energy, aerospace, information technology, education and natural resources sectors.

Its activities also point to indicators that could mean Longhorn is a well-resourced, state-sponsored cyber espionage group that follows a standard work week and is from an English-speaking North American country, Symantec added.

Check Also

PAR Government

PAR Subsidiary Wins Air Force Tech R&D Contract

A PAR Technology subsidiary has won a potential five-year, $12M contract to help the Air Force Research Laboratory develop technologies and an operational concept. PAR Government Services will use AFRL's Integrated Information Management System Cyber Technology Maturation Framework Form, Fit, and Function framework in R&D, assembly, integration, analysis and testing efforts, the Department of Defense said Monday.

Tony Frazier EVP Maxar Technologies

Tony Frazier on Maxar’s Use of Commercial Tech to Support National Security Missions

Tony Frazier, executive vice president of global field operations at Maxar Technologies and a four-time Wash100 awardee, said the company uses commercial technology advancements to help the U.S. government manage national security operations and address various threats from near peer competitors, the ongoing global health crisis and extreme weather events.


Parsons to Receive Air Force Research Lab Support Task Orders

Parsons is scheduled to receive three task orders worth $69M combined later this year to update software applications and perform mission support for the Air Force Research Laboratory.