Athena: WikiLeaks has released a new batch of Vault 7 leaks describing spyware. The new CIA tool "provides remote connection and malware download capabilities to the destination computers," and is supposed to be used by the intelligence service for every version of Microsoft operating systems, from Windows XP to Windows Windows 10.
Spyware is designed to be able to fully acquire full control over infected Windows computers, allowing the CIA to perform many functions on the target machine, such as data deletion or malware installation, data theft, and CIA servers.
The leak includes an Athena user manual, an overview of it technology and a demonstration on how to use spyware. It also reveals that the malicious application can have two uses:
Lady: Athena from XP to Windows 10
Secondary: Hera for Windows 8 via Windows 10
According to WikiLeaks, Athena allows CIA agents to modify their configuration in real time, while the implant can be "adapted to a function."
"Once installed, the malware provides the ability to photograph, configure and manage tasks, load and unload harmful payload memory for specific tasks, deliver and retrieve files from and specific folders on the destination system."
The leaked documents suggest that Athena, written in language Python programming language, and was developed in August 2015, a month after the Windows 10 operating system was released by Microsoft.
Interestingly, a document warns CIA agents to make sure that the spyware will not be revealed by antivirus software programs, such as Kaspersky AV.
Athena was developed by the CIA in collaboration with Siege Technologies - an American cyber security company that offers aggressive technologies and works closely with the United States government.
However, WikiLeaks did not give any detail on Athena's activities, although it is not difficult to imagine how the CIA would use this program.
Since March, WikiLeaks has released nine leaked articles in the "Vault 7" series:
"Year Zero"The CIA is using popular hardware and software.
"Weeping Angel"The spying tool that the service uses to penetrate smart TVs, turning them into disguised microphones.
"Dark Matter"Exploits targeting iPhones and Mac.
"Marble” the source codeof a secret anti-forensic framework. It is essentially an obfuscator used by the CIA to hide the true source of malware.
"Grasshopper"A framework that allows the information service to easily create custom malicious software to violate Microsoft Windows and bypass any virus protection.
"Archimedes"- a MitM attack tool allegedly created by the CIA for targeting computers within a local area network (LAN).
Scribbles" one development which is designed to add 'web beacons' to classified documents to allow intelligence to monitor leaks.
