Microsoft Says It Has Patched Leaked NSA Hacks
Microsoft didn’t elaborate, and only said “Addressed prior to the release of Windows Vista”.
Luckily, when it comes to the recently leaked Windows exploits, Microsoft was already prepared – now supported versions of the operating system are not impacted.
Friday’s high-profile leak was the latest disclosure from a mysterious group known as the Shadow Brokers. “Once validated, engineering teams prioritize fixing the reported issue as soon as possible, taking into consideration the time to fix it across any impacted product or service, as well as versions, the potential threat to customers, and the likelihood of exploitation”.
Security researchers spent most of the day trying to figure out how the various exploits worked by testing the exploits in various virtual machines in their respective labs. In a statement to Reuters, the company says “Other than reporters, no individual or organization has contacted us in relation to the materials released by Shadow Brokers”, indicating that the NSA itself made no attempt to warn Microsoft.
In response, Swift has said there is no evidence that the main Swift network had ever been accessed without authorisation.
Criminals stole millions of dollars from Bangladesh’s central bank after Swift was targeted by hackers previous year.
“The EastNets Network Internal Security Unit has run a complete check of its servers and found no hacker compromise or any vulnerabilities”.
“That’s information you can only get if you compromise the system”, he said.
The Shadow Brokers is a group of anonymous hackers that published hacking tools used by the NSA past year.
Since the early 1990s, interrupting the flow of money from Saudi Arabia, the United Arab Emirates and elsewhere to al-Qaida, the Taliban, and other militant Islamic groups in Afghanistan, Pakistan and other countries has been a major objective of US and allied intelligence agencies.
The Swift network allows banks to move money around the world and the leaked files indicate one of its major bureaus, EastNets, may have been hacked.
Reuters could not independently confirm that EastNets had been hacked. “The reports of an alleged hacker-compromised EastNets Service Bureau network is totally false and unfounded”.
Documents included in the Shadow Brokers release suggest that the NSA, after penetrating the firewall of the SWIFT service providers, used Microsoft exploits to target the computers interacting with the SWIFT network, Comae Technologies’ Suiche said.
Check out NewsGram for latest global news updates.
NSA whistleblower Edward Snowden even chimed in on the claims that EastNet weren’t compromised, with the official Twitter page to EastNet responding to the situation tweeting “No credibility to the online claim of a compromise of EastNets customer information on its SWIFT service bureau“.
The agency monitored the system to spot payments meant to finance crimes, according to the documents released by Snowden.
Some of the documents released by the Shadow Brokers were dated 2013, but others were not dated. Snowden previously released files showing the NSA had the ability to intercept SWIFT messages.