Archimedes: Wikileaks added new documents to Vault 7, detailing a tool attackman-in-the-middle (MitM) allegedly created by the United States Central Intelligence Agency CIA to breach local networks.
Since March, the WikiLeaks has published thousands of documents and secret tools allegedly belonging to the CIA. This latest publication is the 7 version of the Vault 7 series.
Today, we will see an unreleased CIA tool, called Archimedes, and published on Friday. The hacking tool is supposed to be used for attacks on computers within a local area network (LAN).
According to the documents leaked, this MitM tool was formerly called "Fulcrum" but later renamed "Archimedes."
Archimedes contains several improvements from the previous version, such as providing a way to "disable the tool on demand" and added "support for a new HTTP injection method based on the use of a hidden iFrame."
Documents describe Archimedes as a tool that allows users to redirect LAN traffic from a target computer to a computer that is infected by malicious software and is controlled by the CIA before normal traffic is transferred to the gateway.
It's an attack known as man-in-the-middle (MitM).
The tool itself is very simple without great features, as there are many MitM tools available on the Internet, which can be downloaded and used to target users on a local network.
Infosec founder Jake Williams also stated that the tool was not originally developed by the CIA, and rather appears to be a repackaged version of Ettercap – an open source code for MitM attacks.
Last week, WikiLeaks leaked the source code for a more interesting CIA tool known as "Scribbles," software allegedly designed to embed "web beacons" in confidential documents, allowing the secret service to detect insiders and whistleblowers.
Since March, WikiLeaks has made 7 publications in the "Vault 7" series, which include large leaks:
"Year Zero"The CIA is using popular hardware and software.
"Weeping Angel”The espionage tool used by the service to infiltrate smart TVs, turning them into hidden microphones.
"Dark Matter"Exploits targeting iPhones and Mac.
"Marble” the source code of a secret anti-forensic framework. It is essentially an obfuscator that the CIA uses to hide it real malware source.
"Grasshopper"A framework that allows the information service to easily create custom malicious software to violate Microsoft Windows and bypass any virus protection.
