WikiLeaks Reveals “Marble”: Proof CIA Disguises Their Hacks As Russian, Chinese, Arabic…

The latest release is said to potentially allow for 'thousands' of cyber attacks to be attributed to the CIA which were originally blamed on foreign governments.

WikiLeaks Reveals Marble Proof CIA Disguises Their Hacks As Russian Chinese ArabicWikiLeaks’ latest Vault 7 release contains a batch of documents, named ‘Marble’, which detail CIA hacking tactics and how they can misdirect forensic investigators from attributing viruses, trojans and hacking attacks to their agency by inserted code fragments in foreign languages. The tool was in use as recently as 2016.  Per the WikiLeaks release:

The latest release is said to potentially allow for ‘thousands‘ of cyber attacks to be attributed to the CIA which were originally blamed on foreign governments.

WikiLeaks said Marble hides fragments of texts that would allow for the author of the malware to be identified.

WikiLeaks stated the technique is the digital equivalent of a specialized CIA tool which disguises English language text on US produced weapons systems before they are provided to insurgents.

It’s “designed to allow for flexible and easy-to-use obfuscation” as “string obfuscation algorithms” often link malware to a specific developer, according to the whistleblowing site.

The source code released reveals Marble contains test examples in Chinese, Russian, Korean, Arabic and Farsi.

“This would permit a forensic attribution double game, for example by pretending that the spoken language of the malware creator was not American English, but Chinese, but then showing attempts to conceal the use of Chinese, drawing forensic investigators even more strongly to the wrong conclusion,” WikiLeaks explains, “But there are other possibilities, such as hiding fake error messages.”

The code also contains a ‘deobfuscator’ which allows the CIA text obfuscation to be reversed. “Combined with the revealed obfuscation techniques, a pattern or signature emerges which can assist forensic investigators attribute previous hacking attacks and viruses to the CIA.”

Previous Vault7 releases have referred to the CIA’s ability to mask its hacking fingerprints.

WikiLeaks claims the latest release will allow for thousands of viruses and hacking attacks to be attributed to the CIA.

And the rabbit hole just got even deeper.

Full release from WikiLeaks:

Today, March 31st 2017, WikiLeaks releases Vault 7 “Marble” — 676 source code files for the CIA’s secret anti-forensic Marble Framework. Marble is used to hamper forensic investigators and anti-virus companies from attributing viruses, trojans and hacking attacks to the CIA.

Marble does this by hiding (“obfuscating”) text fragments used in CIA malware from visual inspection. This is the digital equivallent of a specalized CIA tool to place covers over the english language text on U.S. produced weapons systems before giving them to insurgents secretly backed by the CIA.

Marble forms part of the CIA’s anti-forensics approach and the CIA’s Core Library of malware code. It is “[D]esigned to allow for flexible and easy-to-use obfuscation” as “string obfuscation algorithms (especially those that are unique) are often used to link malware to a specific developer or development shop.

The Marble source code also includes a deobfuscator to reverse CIA text obfuscation. Combined with the revealed obfuscation techniques, a pattern or signature emerges which can assist forensic investigators attribute previous hacking attacks and viruses to the CIA. Marble was in use at the CIA during 2016. It reached 1.0 in 2015.

The source code shows that Marble has test examples not just in English but also in Chinese, Russian, Korean, Arabic and Farsi.

This would permit a forensic attribution double game, for example by pretending that the spoken language of the malware creator was not American English, but Chinese, but then showing attempts to conceal the use of Chinese, drawing forensic investigators even more strongly to the wrong conclusion, — but there are other possibilities, such as hiding fake error messages.

The Marble Framework is used for obfuscation only and does not contain any vulnerabilties or exploits by itself.

Sourcezerohedge

Find us here

Get news from the CSGLOBE in your inbox each weekday morning

The views and opinions expressed in this article are those of the authors/source and do not necessarily reflect the position of CSGLOBE or its staff.

Paid content

When You Kill Ten Million Africans You Aren’t Called ‘Hitler’

Take a look at this picture. Do you know who it is? Most people haven’t heard of him. But you should have. When you see his face...

Rothschild Family Wealth is Five Times that of World’s Top 8 Billionaires Combined

A recent report by Oxfam International highlights the dramatic rise in income equality by noting that the combined wealth of the world’s top 8...

Did Ancient Egypt Really Have Electricity?

Ancient Egyptians and electricity? So who was it that actually discovered electricity and took the opportunity to create an artificial light source? Benjamin Franklin and...

What's New Today

Georgia House Votes To Allow Citizens To Abolish Police Departments In The State

The Georgia House backed an effort on Friday to dissolve the Glynn County Police Department and any...

Leaked CDC document contradicts Pence claim that U.S. coronavirus cases ‘have stabilized’

Even as Vice President Mike Pence wrote in a Wall Street Journal op-ed published Tuesday that coronavirus...

Five bombshells about Trump from Bolton ‘s book

Excerpts from former national security adviser John Bolton ’s book about his time in the Trump administration...

Don’t Listen to Fox. Here’s What’s Really Going On in Seattle’s Protest Zone.

It seems I live in a city undergoing a “totalitarian takeover” that will lead to “fascist outcomes”...

MOST READ

Ancient Paintings of UFO’s from 200 to 15.000 years ago

Ancient Paintings of UFO's Over the past 15,000 years UFOs have been clearly depicted in paintings from all around the world. This video features some...

Out of the Blue

OUT OF THE BLUE is widely considered one of the best documentary films ever made about UFOs and was directed by celebrated filmmakers James...

What Is Agenda 21? Depopulation of 95% of the World By 2030

Most people are unaware that one of the greatest threats to their freedom may be a United Nations program which plans to depopulate 95%...

When You Kill Ten Million Africans You Aren’t Called ‘Hitler’

Take a look at this picture. Do you know who it is? Most people haven’t heard of him. But you should have. When you see his face...

Big Pharma Preps to Spend Hundreds of Millions to Keep Drug Prices High

Facing an increasingly outraged public, the leading Big Pharma lobby group is hiking its annual dues by more than 50 percent as it prepares...

Another Brick In The Wall – Modern Education and the System of Deception

Like many things — the food industry, the medical-pharmaceutical establishment, the mainstream media – the hidden corporate/bankers who control our governments have also standardized the education system through funding. Many...

Statism: The Most Dangerous Religion in the World

Every religion claims that another one is the most dangerous religion in the world. It’s the world’s biggest blame game. No religion takes it upon...

China Deploys 150,000 Troops to North Korean Border

With the world waiting to see if the madness in Syria will devolve into a true global conflagration, Korean media reported Monday that China...

Unconditional Love

Unconditional love gives us permission to be… Unconditional love is the only thing that can give us permission to be – nothing else will do....

False Reality

The world we’re presented with and are expected to believe in (the world which we’re required to believe in) is a false reality. Probably everyone,...

Contaminated food from China now entering the U.S. under the ‘organic’ label

Natural Health 365 reports that certain food items in China are so contaminated that Chinese citizens won't buy them, and that countries that import...