SpyFiles 4
Today, 15 September 2014, WikiLeaks releases previously unseen copies of weaponised German surveillance malware used by
intelligence agencies around the world to spy on journalists, political dissidents and others.
FinFisher (formerly part of the UK based Gamma Group International until late 2013) is a German company that produces
and sells computer intrusion systems, software exploits and remote monitoring systems that are capable of intercepting
communications and data from OS X, Windows and Linux computers as well as Android, iOS, BlackBerry, Symbian and Windows
Mobile devices. FinFisher first came to public attention in December 2011 when WikiLeaks published documents detailing
their products and business in the first SpyFiles release.
Since the first SpyFiles release, researchers published reports that identified the presence of FinFisher products in countries around the world and documented its use against
journalists, activists and political dissidents.
Julian Assange, WikiLeaks Editor in Chief said: "FinFisher continues to operate brazenly from Germany selling weaponised
surveillance malware to some of the most abusive regimes in the world. The Merkel government pretends to be concerned
about privacy, but its actions speak otherwise. Why does the Merkel government continue to protect FinFisher? This full
data release will help the technical community build tools to protect people from FinFisher including by tracking down
its command and control centers."
FinFisher Relay and FinSpy Proxy are the components of the FinFisher suite responsible for collecting the data acquired from the infected victims and
delivering it to their controllers. It is commonly deployed by FinFisher's customers in strategic points around the
world to route the collected data through an anonymizing chain, in order to disguise the identity of its operators and
the real location of the final storage, which is instead operated by the FinSpy Master.
WikiLeaks is also publishing previously unreleased copies of the FinFisher FinSpy PC spyware for Windows. This software is designed to be covertly installed on a Windows computer and silently intercept
files and communications, such as Skype calls, emails, video and audio through the webcam and microphone (you can find
more details on FinSpy in the first SpyFiles release). In order to prevent any accidental execution and infection, the following files have been renamed and compressed in
password protected archives (the password is "infected"). They are weaponised malware, so handle carefully.
[all data links at WikiLeaks - SpyFiles 4]
In order to challenge the secrecy and the lack of accountability of the surveillance industry, analyzing the internals
of this software could allow security and privacy researchers to develop new fingerprints and detection techniques,
identify more countries currently using the FinFisher spyware and uncover human rights abuses.
________________________________________
In addition, in this fourth iteration of the SpyFiles collection, WikiLeaks publishes the newly indexed material the
same as the recent FinFisher breach (for which you can find the torrent file here), including new brochures and a database of the customer support website, that provide updated details on their
productline and a unique insight into the company's customer-base.
In order to make the data more easily accessible and consumable, all the new brochures, videos and manuals are now available organized under the related FinFisher product name. The database is represented in full, from which WikiLeaks compiled a list of customers, their eventual attribution, all the
associated support tickets and acquired licenses, along with the estimated costs calculated from FinFisher's price list.
WikiLeaks conservatively estimates FinFisher's revenue from these sales to amount to around €50,000,000. Within the full list of customers, it's worth noticing that among the largest is Mongolia, which has been recently selected as new Chair of the Freedom Online Coalition.
Together with the previous releases, the SpyFiles collection represents a unique and central resource where to find
extensive and exclusive documentation about the global surveillance industry, also indexed and searchable through the WikiLeaks Search.