Microsoft Confirms NSA Hacking Loophole Patched In Windows

A year ago hackers stole $81 billion Dollars from the Bangladesh central bank, which utilizes the SWIFT messaging system.

Several of the files we’ve seen appear to be “top secret” in classification, such as JeepfleaMarket, which appears to utilize the Jeepflea program to collect data on servers at least nine worldwide banks.

TheShadowBrokers, which startled the security experts past year by releasing some of the NSA’s hacking tools, has resumed pouring secrets into the public domain, this time by publishing purported details of the NSA’s operations against banks across the Arab world.

Reuters reports that SWIFT also claims there’s no evidence its network has been accessed.

But the organisation said that the local messaging systems of some Swift client banks had been breached. In a message sent to TechCrunch overnight, the company said it has addressed the issue for systems running Windows 7 and later.

“I don’t think I have ever seen so much exploits and 0day [exploits] released at one time in my entire life”, security researcher Matthew Hickey told the Intercept.

“The reports of an alleged hacker-compromised EastNets Service Bureau (ENSB) network is totally false and unfounded”.

“The EastNets Network Internal Security Unit has run a complete check of its servers and found no hacker compromise or any vulnerabilities”. It’s likely an independent security research firm tipped Microsoft off to these holes, which they promptly patched and never looked back. If so, it implies that the USA government could have withheld the information from Microsoft. If the documents are real, it will be confirmed that the NSA has been monitoring the transactions of various Latin American and Middle Eastern banks. The NSA allegedly claimed in its now hacked and released article that the “box has been implanted and we are collecting”, which Wired explains as the “jargon used by the NSA to indicate spyware has been successfully implanted on a computer”.

EastNets on Friday denied it had been hacked.

In a statement on its website, EastNets rejected the allegations.

Former NSA intelligence contractor Edward Snowden talks to a security conference via a video link from Russian Federation.

The agency monitored the system to spot payments meant to finance crimes, according to the documents released by Snowden. The group has been posting files suspected to originate from the NSA since last August.

Microsoft says that exploits such as ENGLISHMANSDENTIST (Outlook), EXPLODINGCAN (IIS 6.0), and ESTEEMAUDIT (RDP) will not receive any patches since they don’t work on supported Windows platforms.

On Friday, April 14, the actor group identifying itself as the Shadow Brokers released new information containing exploits for previously disclosed and undisclosed vulnerabilities that affect various versions of Microsoft Windows, as well as applications such as Lotus Domino. The releases are published with odd and misspelled blog posts, and recent posts have been critical of the Trump administration.

Four of the vulnerabilities were only patched in 2017 and it is unknown at this point, how long the Shadow Brokers or the Equation Group may have been actively using the exploits before the patches were issued.