“Vault 7”的意思、由来-开放百科全书

Vault 7 is a series of documents that WikiLeaks began to publish on 7 March 2017, that detail activities and capabilities of the United States Central Intelligence Agency to perform electronic surveillance and cyber warfare. The files, dated from 2013–2016, include details on the agency's software capabilities, such as the ability to compromise cars, smart TVs,^[1] web browsers (including Google Chrome, Microsoft Edge, Mozilla Firefox, and Opera Software ASA),^[1]^[2]^[3] and the operating systems of most smartphones (including Apple's iOS and Google's Android), as well as other operating systems such as Microsoft Windows, macOS, and Linux.^[4]{{Citation needed|reason=article don't talk about linux|date=May 2017}}

History

In February 2017, WikiLeaks began teasing the release of "Vault 7" with a series of cryptic messages on Twitter, according to media reports.^[5] Later on in February, WikiLeaks released classified documents describing how the CIA monitored the 2012 French presidential election.^[7] The press release for the leak stated that it was published "as context for its forthcoming CIA Vault 7 series."^[6]

In March 2017, US intelligence and law enforcement officials said to the international wire agency Reuters that they have been aware of the CIA security breach, which led to Vault 7, since late-2016. Two officials said they were focusing on "contractors" as the possible source of the leaks.^[7]

In 2017, federal law enforcement identified CIA software engineer Joshua Adam Schulte as a suspected source of Vault 7.^[8]^[9]

Publications

Part 1 - "Year Zero"

The first batch of documents named "Year Zero" was published by WikiLeaks on 7 March 2017, consisting of 7,818 web pages with 943 attachments, purportedly from the Center for Cyber Intelligence,^[10] which already contains more pages than former NSA contractor and leaker, Edward Snowden's NSA release.^[11] WikiLeaks did not name the source, but said that the files had "circulated among former U.S. government hackers and contractors in an unauthorized manner, one of whom has provided WikiLeaks with portions of the archive."^[1] According to WikiLeaks, the source "wishes to initiate a public debate about the security, creation, use, proliferation and democratic control of cyberweapons" since these tools raise questions that "urgently need to be debated in public, including whether the C.I.A.'s hacking capabilities exceed its mandated powers and the problem of public oversight of the agency."^[1]

WikiLeaks redacted names and other identifying information from the documents before their release,^[1] while attempting to allow for connections between people to be drawn via unique identifiers generated by WikiLeaks.^[12]^[13] It also said that it would postpone releasing the source code for the cyber weapons, which is reportedly several hundred million lines long, "until a consensus emerges on the technical and political nature of the C.I.A.'s program and how such 'weapons' should be analyzed, disarmed and published."^[1] WikiLeaks founder Julian Assange claimed this was only part of a larger series.^[11]

The CIA released a statement saying, "The American public should be deeply troubled by any WikiLeaks disclosure designed to damage the Intelligence Community's ability to protect America against terrorists or other adversaries. Such disclosures not only jeopardize US personnel and operations, but also equip our adversaries with tools and information to do us harm."^[14]

Assange held a press conference on 9 March to offer to share unpublished data from Vault 7 with technology companies to enable them to fix vulnerabilities detailed therein. He stated that only 1% of the total leak has been released and that much of the remainder of the leak included unpatched vulnerabilities but that he was working with Microsoft, Apple and Google to get these vulnerabilities patched as he would not release information which would put the public at risk, and as fixes were released by manufacturers he would release details of vulnerabilities. As such, none of the vulnerabilities currently released are zero-day exploits. In this press release Assange also read an official statement by Microsoft which stated Microsoft's desire for the "next Geneva Convention" which would protect people from government cyber weapons the same way the previous Geneva Conventions have protected noncombatants from warfare.^[15]

In a statement issued on 19 March 2017, Assange said the technology companies who had been contacted had not agreed, disagreed or questioned what he termed as WikiLeaks' standard industry disclosure plan. The standard disclosure time for a vulnerability is 90 days after the company responsible for patching the software is given full details of the flaw.^[16] According to WikiLeaks, only Mozilla had been provided with information on the vulnerabilities, while "Google and some other companies" only confirmed receiving the initial notification. WikiLeaks stated: "Most of these lagging companies have conflicts of interest due to their classified work with US government agencies. In practice such associations limit industry staff with US security clearances from fixing holes based on leaked information from the CIA. Should such companies choose to not secure their users against CIA or NSA attacks users may prefer organizations such as Mozilla or European companies that prioritize their users over government contracts".^[17]^[18]

Part 2 - "Dark Matter"

On 23 March 2017 WikiLeaks published Vault 7 part 2 "Dark Matter". That publication includes documentation for several CIA efforts to hack Apple's iPhones and Macs.^[19]^[20]^[21]

Part 3 - "Marble"

On 31 March 2017 WikiLeaks published Vault 7 part 3 "Marble". It contained 676 source code files for the CIA's Marble Framework. It is used to obfuscate, or scramble, malware code in an attempt to make it so that anti-virus firms or investigators cannot understand the code or attribute its source. According to WikiLeaks, the code also included a de-obfuscator to reverse the obfuscation effects.^[22]^[23]^[31]

Part 4 - "Grasshopper"

On 7 April 2017 WikiLeaks published Vault 7 part 4 dubbed "Grasshopper". The publication contains 27 documents from the CIA's Grasshopper framework, which is used by the CIA to build customized and persistent malware payloads for the Microsoft Windows operating systems. Grasshopper focused on Personal Security Product (PSP) avoidance. PSPs are antivirus software such as MS Security Essentials, Symantec Endpoint or Kaspersky IS.^[24]^[25]

Part 5 - "HIVE"

On 14 April 2017 WikiLeaks published Vault 7 part 5, titled "HIVE". Based on the CIA top-secret virus program created by its "Embedded Development Branch" (EDB). The six documents published by WikiLeaks are related to the HIVE multi-platform CIA malware suite. A CIA back-end infrastructure with a public-facing HTTPS interface used by CIA to transfer information from target desktop computers and smartphones to the CIA, and open those devices to receive further commands from CIA operators to execute specific tasks. Also called Listening Post (LP), and Command and Control (C2). All of the above while hiding its presence behind unsuspicious-looking public domains. This masking interface is known as "Switchblade".^[26]

Part 6 - "Weeping Angel"

On 21 April 2017 WikiLeaks published Vault 7 part 6, code-named "Weeping Angel". Which is a hacking tool co-developed by the CIA and MI5. Used to exploit a series of smart TVs for the purpose of covert intelligence gathering. Once installed in suitable televisions with a USB stick, the hacking tool enables those televisions' built-in microphones and possibly video cameras to record their surroundings, while the televisions falsely appear to be turned off. The recorded data is then either stored locally into the television's memory or sent over the internet to the CIA. Allegedly both the CIA and MI5 agencies collaborated to develop that malware and coordinated their work in Joint Development Workshops.^[27]^[28]^[29] As of this part 6 publication, "Weeping Angel" is the second major CIA hacking tool which notably references the British television show, Dr. Who, alongside "Sonic Screwdriver" in "Dark Matter".^[30]^[31]

Part 7 - "Scribbles"

On 28 April 2017 WikiLeaks published Vault 7 part 7 "Scribbles". The leak includes documentation and source code of a tool intended to track documents leaked to whistleblowers and journalists by embedding web beacon tags into classified documents to trace who leaked them.^[32]^[33] The tool affects Microsoft Office documents, specifically "Microsoft Office 2013 (on Windows 8.1 x64), documents from Office versions 97-2016 (Office 95 documents will not work!) [and d]ocuments that are not [locked], encrypted, or password-protected".^[34] When a CIA watermarked document is opened, an invisible image within the document that is hosted on the agency's server is loaded, generating a HTTP request. The request is then logged on the server, giving the intelligence agency information about who is opening it and where it is being opened. However, if a watermarked document is opened in an alternative word processor the image may be visible to the viewer. The documentation also states that if the document is viewed offline or in protected view, the watermarked image will not be able to contact its home server. This is only overridden when a user enables editing.^[35]

Part 8 - "Archimedes"

On 5 May 2017 WikiLeaks published Vault 7 part 8 "Archimedes". According to U.S. SANS Institute instructor Jake Williams, who analyzed the published documents, Archimedes is a virus previously codenamed "Fulcrum". According to cyber security expert and ENISA member Pierluigi Paganini, the CIA operators use Archimedes to redirect local area network (LAN) web browser sessions from a targeted computer through a computer controlled by the CIA before the sessions are routed to the users. This type of attack is known as man-in-the-middle (MitM). With their publication WikiLeaks included a number of hashes that they claim can be used to potentially identify the Archimedes virus and guard against it in the future. Paganini stated that potential targeted computers can search for those hashes on their systems to check if their systems had been attacked by the CIA.^[36]

Part 9 - "AfterMidnight" and "Assassin"

On 12 May 2017 WikiLeaks published Vault 7 part 9 "AfterMidnight" and "Assassin". AfterMidnight is a malware installed on a target personal computer and disguises as a DLL file, which is executed while the user's computer reboots. It then triggers a connection to the CIA's Command and Control (C2) computer, from which it downloads various modules to run. As for Assassin, it is very similar to its AfterMidnight counterpart, but deceptively runs inside a Windows service process. CIA operators reportedly use Assassin as a C2 to execute a series of tasks, collect, and then periodically send user data to the CIA Listening Post(s) (LP). Similar to backdoor Trojan behavior. Both AfterMidnight and Assassin run on Windows operating system, are persistent, and periodically beacon to their configured LP to either request tasks or send private information to the CIA, as well as automatically uninstall themselves on a set date and time.^[37]^[38]

Part 10 - "Athena"

On 19 May 2017 WikiLeaks published Vault 7 part 10 "Athena". The published user guide, demo, and related documents were created between September 2015 and February 2016. They are all about a malware allegedly developed for the CIA in August 2015, roughly one month after Microsoft released Windows 10 with their firm statements about how difficult it was to compromise. Both the primary "Athena" malware and its secondary malware named "Hera" are similar in theory to Grasshopper and AfterMidnight malware but with some significant differences. One of those differences is that Athena and Hera were developed by the CIA with a New Hampshire private corporation called Siege Technologies. During a Bloomberg 2014 interview the founder of Siege Technologies confirmed and justified their development of such malware. Athena malware completely hijacks Windows' Remote Access services, while Hera hijacks Windows Dnscache service. Also both Athena and Hera affect all current versions of Windows including, but not limited to, Windows Server 2012 and Windows 10. Another difference is in the types of encryption used between the infected computers and the CIA Listening Posts (LP). As for the similarities, they exploit persistent DLL files to create a backdoor to communicate with CIA's LP, steal private data, then send it to CIA servers, or delete private data on the target computer, as well as Command and Control (C2) for CIA operatives to send additional malicious software to further run specific tasks on the attacked computer. All of the above designed to deceive computer security software. Beside the published detailed documents, WikiLeaks has not provided any evidence suggesting the CIA used Athena or not.^[39]^[40]^[41]

Part 11 - "Pandemic"

On 1 June 2017 WikiLeaks published Vault 7 part 11 "Pandemic". This tool serves as a persistent implant affecting Windows machines with shared folders. It functions as a file system filter driver on an infected computer, and listens for Server Message Block traffic while detecting download attempts from other computers on a local network. "Pandemic" will answer a download request on behalf of the infected computer. However, it will replace the legitimate file with malware. In order to obfuscate its activities, "Pandemic" only modifies or replaces the legitimate file in transit, leaving the original on the server unchanged. The implant allows 20 files to be modified at a time, with a maximum individual file size of 800MB. While not stated in the leaked documentation, it is possible that newly infected computers could themselves become "Pandemic" file servers, allowing the implant to reach new targets on a local network.^[42]

Part 12 - "Cherry Blossom"

Part 13 - "Brutal Kangaroo"

Part 14 - "Elsa"

Part 15 - "OutlawCountry"

Part 16 - "BothanSpy"

Part 17 - "Highrise"

Part 18 - "UCL / Raytheon"

Part 19 - "Imperial"

Part 20 - "Dumbo"

Part 21 - "CouchPotato"

Part 22 - "ExpressLane"

These documents show one of the cyber operations the CIA conducts against liaison services -- which includes among many others the National Security Agency (NSA), the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI).

The OTS (Office of Technical Services), a branch within the CIA, has a biometric collection system that is provided to liaison services around the world -- with the expectation for sharing of the biometric takes collected on the systems. But this 'voluntary sharing' obviously does not work or is considered insufficient by the CIA, because ExpressLane is a covert information collection tool that is used by the CIA to secretly exfiltrate data collections from such systems provided to liaison services.

ExpressLane is installed and run with the cover of upgrading the biometric software by OTS agents that visit the liaison sites. Liaison officers overseeing this procedure will remain unsuspicious, as the data exfiltration disguises behind a Windows installation splash screen.

The core components of the OTS system are based on products from Cross Match, a US company specializing in biometric software for law enforcement and the Intelligence Community. The company hit the headlines in 2011 when it was reported that the US military used a Cross Match product to identify Osama bin Laden during the assassination operation in Pakistan.- 24 August 2017^[53]

Part 23 - "Angelfire"

Part 24 - "Protego"

Authenticity

Donald Trump: Because I don't want to do anything that's going to violate any strength of an agency. We have enough problems.

And by the way, with the CIA, I just want people to know, the CIA was hacked, and a lot of things taken -- that was during the Obama years. That was not during us. That was during the Obama situation. Mike Pompeo is there now doing a fantastic job.|author=— transcript||source=Tucker Carlson Tonight, March 16, 2017, (Fox News)^[56]|width=500px}}

When asked about their authenticity, former Director of the Central Intelligence Agency Michael Hayden replied that the organization does "not comment on the authenticity or content of purported intelligence documents."^[57] However, speaking on condition of anonymity, current and former intelligence officials said that the documents appear to be genuine.^[58] Edward Snowden tweeted shortly after the documents' release that they looked authentic.^[67] Robert M. Chesney, a law professor at the University of Texas and Director of the Technology and Public Policy Program at the Center for Strategic and International Studies (CSIS), likened the Vault 7 to NSA hacking tools disclosed in 2016 by a group calling itself The Shadow Brokers.^[57]

On 15 March 2017, President Donald Trump stated during an interview that "the CIA was hacked, and a lot of things taken".^[59] The following day in a statement, Adam Schiff, the Ranking Member of the House Intelligence Committee, wrote in a news release, "In his effort to once again blame Obama, the President appeared to have discussed something that, if true and accurate, would otherwise be considered classified information."^[60] Schiff also said that the president has the power to declassify whatever he wants.^[61]

Organization of cyber warfare

WikiLeaks said that the documents came from "an isolated, high-security network situated inside the CIA's Center for Cyber Intelligence (CCI) in Langley, Virginia."^[62] The documents allowed WikiLeaks to partially determine the structure and organization of the CCI. The CCI reportedly has an entire unit devoted to compromising Apple products.^[63]

The cybersecurity firm Symantec analyzed Vault 7 documents and found some of the described software closely matched cyberattacks by "Longhorn," which it had monitored since 2014. Symantec had previously suspected that "Longhorn" was government-sponsored and had tracked its usage against 40 targets in 16 countries.^[64]^[65]

Frankfurt base

The first portion of the documents made public on 7 March 2017, Vault 7 "Year Zero", revealed that a top secret CIA unit used the German city of Frankfurt as the starting point for hacking attacks on Europe, China and the Middle East. According to the documents, the U.S. government uses its Consulate General Office in Frankfurt as a hacker base for cyber operations. WikiLeaks documents reveal the Frankfurt hackers, part of the Center for Cyber Intelligence Europe (CCIE), were given cover identities and diplomatic passports to obfuscate customs officers to gain entry to Germany.^[63]^[66]

The chief Public Prosecutor General of the Federal Court of Justice in Karlsruhe Peter Frank announced on 8 March 2017 that the government was conducting a preliminary investigation to see if it will launch a major probe into the activities being conducted out of the consulate and also more broadly whether people in Germany were being attacked by the CIA.^[67]^[15] Germany's foreign minister Sigmar Gabriel from the Social Democratic Party responded to the documents of Vault 7 "Year Zero" that the CIA used Frankfurt as a base for its digital espionage operations, saying that Germany did not have any information about the cyber attacks.^[68]

UMBRAGE

The documents reportedly revealed that the agency had amassed a large collection of cyberattack techniques and malware produced by other hackers. This library was reportedly maintained by the CIA's Remote Devices Branch's UMBRAGE group, with examples of using these techniques and source code contained in the "Umbrage Component Library" git repository. According to WikiLeaks, by recycling the techniques of third-parties through UMBRAGE, the CIA can not only increase its total number of attacks,^[81] but can also mislead forensic investigators by disguising these attacks as the work of other groups and nations.^[57]^[63] Among the techniques borrowed by UMBRAGE was the file wiping implementation used by Shamoon. According to PC World, some of the techniques and code snippets have been used by CIA in its internal projects, whose end result cannot be inferred from the leaks. PC World noted that the practice of planting "false flags" to deter attribution was not a new development in cyberattacks: Russian, North Korean and Israeli hacker groups are among those suspected of using false flags.^[69]

According to a study by Kim Zetter in The Intercept, UMBRAGE was probably much more focused on speeding up development by repurposing existing tools, rather than on planting false flags.^[70] Robert Graham, CEO of Errata Security told The Intercept that the source code referenced in the UMBRAGE documents is "extremely public", and is likely used by a multitude of groups and state actors. Graham added: "What we can conclusively say from the evidence in the documents is that they're creating snippets of code for use in other projects and they're reusing methods in code that they find on the internet. ... Elsewhere they talk about obscuring attacks so you can't see where it's coming from, but there's no concrete plan to do a false flag operation. They're not trying to say 'We're going to make this look like Russia'."^[71]

False flag theories

On the day the Vault 7 documents were first released, WikiLeaks described UMBRAGE as "a substantial library of attack techniques 'stolen' from malware produced in other states including the Russian Federation," and tweeted, "CIA steals other groups virus and malware facilitating false flag attacks."^[72] A conspiracy theory soon emerged alleging that the CIA framed the Russian government for interfering in the 2016 U.S. elections. Conservative commentators such as Sean Hannity and Ann Coulter speculated about this possibility on Twitter, and Rush Limbaugh discussed it on his radio show.^[73] Russian foreign minister Sergey Lavrov said that Vault 7 showed that "the CIA could get access to such 'fingerprints' and then use them."^[72]

Cybersecurity writers, such as Ben Buchanan and Kevin Poulsen, were skeptical of those theories.^[74]^[7] Poulsen wrote, "The leaked catalog isn't organized by country of origin, and the specific malware used by the Russian DNC hackers is nowhere on the list."^[75]

Marble framework

The documents describe the Marble framework, a string obfuscator used to hide text fragments in malware from visual inspection. As part of the program, foreign languages were used to cover up the source of CIA hacks.^[76]^[77]^[78] According to WikiLeaks, it reached 1.0 in 2015 and was used by the CIA throughout 2016.^[79]

In its release, WikiLeaks described the primary purpose of "Marble" as to insert foreign language text into the malware to mask viruses, trojans and hacking attacks, making it more difficult for them to be tracked to the CIA and to cause forensic investigators to falsely attribute code to the wrong nation.^[80] The source code revealed that Marble had examples in Chinese, Russian, Korean, Arabic and Persian.^[81] These were the languages of the US's main cyber-adversaries – China, Russia, North Korea, and Iran.^[82]

Analysts called WikiLeaks' description of Marble's main purpose inaccurate, telling The Hill its main purpose was probably to avoid detection by antivirus programs.^[83]

Marble also contained a deobfuscator tool with which the CIA could reverse text obfuscation.^[82]

Security researcher Nicholas Weaver from International Computer Science Institute in Berkeley told the Washington Post: "This appears to be one of the most technically damaging leaks ever done by WikiLeaks, as it seems designed to directly disrupt ongoing CIA operations."^[84]^[85]

Compromised technology and software

CDs/DVDs

HammerDrill is a CD/DVD collection tool that collects directory walks and files to a configured directory and filename pattern as well as logging CD/DVD insertion and removal events. v2.0 adds a gap jumping capability that Trojans 32-bit executables as they are being burned to disc by Nero. Additionally, v2.0 adds a status, termination and an on-demand collection feature controlled by HammerDrillStatus.dll, HammerDrillKiller.dll and HammerDrillCollector.dll. The logging now also fingerprints discs by hashing the first two blocks of the ISO image, which enables unique identification of multi-sessions discs even as data is added and removed. The log also logs anytime a HammerDrill trojaned binary is seen on a disc.^[86]^[87]

Apple products

After WikiLeaks released the first installment of Vault 7, "Year Zero", Apple stated that "many of the issues leaked today were already patched in the latest iOS," and that the company "will continue work to rapidly address any identified vulnerabilities."^[88]

On 23 March 2017, WikiLeaks released "Dark Matter", the second batch of documents in its Vault 7 series, detailing the hacking techniques and tools all focusing Apple products developed by the Embedded Development Branch (EDB) of the CIA. The leak also revealed the CIA had been targeting the iPhone since 2008, a year after the device was released. These EDB projects attacked Apple's firmware meaning that the attack code would persist even if the system gets rebooted.^[89]^[90] The "Dark Matter" archive included documents from 2009 and 2013. Apple issued a second statement assuring, that based on an "initial analysis, the alleged iPhone vulnerability affected iPhone 3G only and was fixed in 2009 when iPhone 3GS was released." Additionally, a preliminary assessment showed "the alleged Mac vulnerabilities were previously fixed in all Macs launched after 2013".^[91]^[92]

On 24 March 2017 WikiLeaks described Apple as "duplicitous" for saying it had fixed security flaws: "Apple's claim that it has "fixed" all "vulnerabilities" described in DARKMATTER is duplicitous. EFI is a systemic problem, not a zero-day". Echoing the lack of trust in Apple was the German-Finnish Internet entrepreneur Kim Dotcom, who wrote: "Apple statement is not credible."^[93]

Cisco

WikiLeaks said on 19 March 2017 on Twitter that the "CIA was secretly exploiting" a vulnerability in a huge range of Cisco router models discovered thanks to the Vault 7 documents.^[94]^[95] The CIA had learned more than a year ago how to exploit flaws in Cisco's widely used internet switches, which direct electronic traffic, to enable eavesdropping. Cisco quickly reassigned staff from other projects to turn their focus solely on analyzing the attack and to figure out how the CIA hacking worked, so they could help customers patch their systems and prevent criminal hackers or spies from using similar methods.^[96]

On 20 March, Cisco researchers confirmed that their study of the Vault 7 documents showed the CIA had developed malware which could exploit a flaw found in 318 of Cisco's switch models and alter or take control of the network.^[97]

Cisco issued a warning on security risks, patches were not available, but Cisco provided mitigation advice.^[95]

Smartphones/tablets

The electronic tools can reportedly compromise both Apple's iOS and Google's Android operating systems. By adding malware to the Android operating system, the tools could gain access to secure communications made on a device.^[98]

Messaging services

According to WikiLeaks, once an Android smartphone is penetrated the agency can collect "audio and message traffic before encryption is applied".^[57] Some of the agency's software is reportedly able to gain access to messages sent by instant messaging services.^[57] This method of accessing messages differs from obtaining access by decrypting an already encrypted message.^[98] While the encryption of messengers that offer end-to-end encryption, such as Telegram, WhatsApp and Signal, wasn't reported to be cracked, their encryption can be bypassed by capturing input before their encryption is applied, by methods such as keylogging and recording the touch input from the user.^[98] Commentators, among them Snowden and cryptographer and security pundit Bruce Schneier, observed that Wikileaks incorrectly implied that the messaging apps themselves, and their underlying encryption, had been compromised - an implication which was in turn reported for a period by the New York Times and other mainstream outlets.^[99]^[57]

Vehicle control systems

One document reportedly showed that the CIA was researching ways to infect vehicle control systems. WikiLeaks stated, "The purpose of such control is not specified, but it would permit the CIA to engage in nearly undetectable assassinations."^[100]^[63] This statement brought renewed attention to conspiracy theories surrounding the death of Michael Hastings.^[101]^[100]

Windows

The documents refer to a "Windows FAX DLL injection" exploit in Windows XP, Windows Vista and Windows 7 operating systems.^[10] This would allow a user with malicious intents to hide its own malware under the DLL of another application. However, a computer must have already been compromised through another method for the injection to take place.^[102]

Commentary

On 7 March 2017, Edward Snowden comments on the importance of the release, stating that it reveals the United States Government to be "developing vulnerabilities in US products" and "then intentionally keeping the holes open", which he considers highly reckless.^[103]

On 7 March 2017, Nathan White, Senior Legislative Manager at the Internet advocacy group Access Now, writes:^[104]

On 8 March 2017, Lee Mathews, a contributor to Forbes, wrote that most of the hacking techniques described in Vault 7 were already known to many cybersecurity experts.^[105]

On 8 March 2017, Some note that the revealed techniques and tools are most likely to be used for more targeted surveillance^[106]^[107] revealed by Edward Snowden.^[108] In a press conference Assange states that while the leaks' content "at least means that they have to engage in targeted attacks which is more expensive and might have more order trail" he also states they have exposed the CIA's "automated implant branch" which not just develops and uses viruses "but also automates how that is done" which may approach the level of bulk intersection.^[15]

On 8 April 2017, Ashley Gorski, an American Civil Liberties Union staff attorney calls it "critical to understand" that "these vulnerabilities can be exploited not just by our government but by foreign governments and cyber criminals around the world." Justin Cappos, professor in the Computer Science and Engineering department at New York University asks "if the government knows of a problem in your phone that bad guys could use to hack your phone and have the ability to spy on you, is that a weakness that they themselves should use for counterterrorism, or for their own spying capabilities, or is it a problem they should fix for everyone?".^[109]

On 8 April 2017, Cindy Cohn, executive director of the international non-profit digital rights group based in San Francisco Electronic Frontier Foundation, said: "If the C.I.A. was walking past your front door and saw that your lock was broken, they should at least tell you and maybe even help you get it fixed." "And worse, they then lost track of the information they had kept from you so that now criminals and hostile foreign governments know about your broken lock." ^[110] Furthermore, she stated that the CIA had "failed to accurately assess the risk of not disclosing vulnerabilities. Even spy agencies like the CIA have a responsibility to protect the security and privacy of Americans."^[111] "The freedom to have a private conversation – free from the worry that a hostile government, a rogue government agent or a competitor or a criminal are listening – is central to a free society". While not as strict as privacy laws in Europe, the Fourth amendment to the US constitution does guarantee the right to be free from unreasonable searches and seizures.^[112]

On 12 May 2017 Microsoft President and Chief Legal Officer, Brad Smith, wrote "This is an emerging pattern in 2017. We have seen vulnerabilities stored by the CIA show up on WikiLeaks," In other words, Smith expressed concern about the fact that the CIA have stockpiled such computer vulnerabilities, which in turn were stolen from them, while they failed to inform Microsoft in a timely fashion about their security breach, as a result the privacy and security of their customers around the world were potentially negatively affected for an extended period and caused widespread damage.^[37]^[113]

See also

References

1. ^{{Cite news|url=https://www.wired.com/2017/03/cia-can-hack-phone-pc-tv-says-wikileaks/|title=How the CIA Can Hack Your Phone, PC, and TV (Says WikiLeaks)|last=Greenberg|first=Andy|date=2017-03-07|work=WIRED|access-date=2017-04-08|archive-url=|archive-date=|dead-url=|language=en-US}}
2. ^{{Cite news|url=http://www.ibtimes.co.uk/vault-7-cia-hacking-tools-were-used-spy-ios-android-samsung-smart-tvs-1610263|title=Vault 7: CIA hacking tools were used to spy on iOS, Android and Samsung smart TVs|last=Murdock|first=Jason|date=2017-03-07|work=International Business Times UK|access-date=2017-04-08|archive-url=|archive-date=|dead-url=}}
3. ^{{Cite news|url=http://www.cbsnews.com/news/wikileaks-cia-documents-released-cyber-intelligence/|title=WikiLeaks posts trove of CIA documents detailing mass hacking|last=|first=|date=2017-03-07|work=CBS News|access-date=2017-04-08|archive-url=|archive-date=|dead-url=|language=en}}
4. ^{{cite news | last = Miller | first = Greg | title = WikiLeaks says it has obtained trove of CIA hacking tools | url = https://www.washingtonpost.com/world/national-security/wikileaks-says-it-has-obtained-trove-of-cia-hacking-tools/2017/03/07/c8c50c5c-0345-11e7-b1e9-a05d3c21f7cf_story.html | newspaper = The Washington Post | date = March 7, 2017 | access-date = May 15, 2018}}
5. ^{{cite web |last=Dwilson |first=Stephanie Dube |url=http://heavy.com/tech/2017/02/what-is-vault-7-wikileaks-theories-vault7-tweets-photos-analysis-clues-twitter-who-where-when-why-how/ |title=What Is Vault 7 on WikiLeaks? |date=7 February 2017 |work=Heavy |accessdate=12 March 2017}}
6. ^{{cite web |url=https://wikileaks.org/cia-france-elections-2012/ |title=CIA espionage orders for the 2012 French presidential election |publisher=WikiLeaks |date=16 February 2017 |accessdate=12 March 2017}}
7. ^Reuters: [https://www.reuters.com/article/us-cia-wikileaks-leak-idUSKBN16F2CZ U.S intel, law enforcement officials aware of CIA breach since late last year], 8 March 2017
8. ^{{cite news | last = Harris | first = Shane | title = U.S. identifies suspect in major leak of CIA hacking tools | url = https://www.washingtonpost.com/world/national-security/us-identifies-suspect-in-major-leak-of-cia-hacking-tools/2018/05/15/5d5ef3f8-5865-11e8-8836-a4a123c359ab_story.html | newspaper = The Washington Post | date = May 15, 2018 | access-date = May 15, 2018}}
9. ^{{cite news |last1=Shane |first1=Scott |last2=Goldman |first2=Adam |url=https://www.nytimes.com/2018/05/15/us/cia-hacking-tools-leak.html |title=Suspect Identified in C.I.A. Leak Was Charged, but Not for the Breach |date=May 15, 2018 |work=The New York Times |accessdate=May 16, 2018}}
10. ^¹{{Cite news|url=http://www.cbsnews.com/news/wikileaks-cia-documents-released-cyber-intelligence/|title=WikiLeaks claims to release thousands of CIA documents|last=|first=|date=7 March 2017|publisher=CBS News|agency=Associated Press|access-date=7 March 2017|archive-url=|archive-date=|dead-url=|language=en}}
11. ^¹{{cite web|url=https://www.independent.co.uk/life-style/gadgets-and-tech/news/wikileaks-cia-vault-7-julian-assange-year-zero-documents-download-spying-secrets-a7616031.html|title=WikiLeaks publishes massive trove of CIA spying files in 'Vault 7' release|date=7 March 2017|access-date=7 March 2017|work=The Independent}}
12. ^{{cite web|url=https://wikileaks.org/ciav7p1/|accessdate=10 March 2017|title=Vault7 - Home|publisher=WikiLeaks|at="Redactions" section}}
13. ^{{cite web|url=https://arstechnica.com/security/2017/03/wikileaks-publishes-what-it-says-is-trove-of-cia-hacking-tools/|title=Wikileaks publishes docs from what it says are CIA hacking trove|date=7 March 2017|access-date=7 March 2017|work=Ars Technica}}
14. ^{{cite web |last=Berke |first=Jeremy |url=http://www.businessinsider.com/cia-responds-to-wikileaks-disclosure-2017-3 |title=CIA: Americans 'should be deeply troubled' by WikiLeaks' disclosure |date=8 March 2017 |work=Business Insider |accessdate=10 March 2017}}
15. ^¹²{{cite web|url=https://steemit.com/wikileaks/@ausbitbank/wikileaks-vault-7-march-9th-press-conference-transcript|title=Wikileaks Vault 7 March 9th Press Conference [Full Transcript] — Steemit|date=10 March 2017|publisher=}}
16. ^Chris Evans, Ben Hawkes: [https://googleprojectzero.blogspot.de/2015/02/feedback-and-data-driven-updates-to.html Feedback and data-driven updates to Google’s disclosure policy], Google's Project Zero blog, 13 February 2015
17. ^Sam Varghese: Vault 7: Plans to expose firms that do not patch flaws, iTWire, 20 March 2017
18. ^Assange chastises companies that haven't responded to CIA vulnerability offers, The Hill, 20 March 2017
19. ^{{Cite news|url=http://thehill.com/policy/cybersecurity/325443-wikileaks-publishes-cia-apple-hacking-tactics|title=WikiLeaks publishes CIA hacking tactics for Apple products|last=Uchill|first=Joe|date=2017-03-23|work=The Hill|access-date=2017-03-31|archive-url=|archive-date=|dead-url=}}
20. ^{{Cite web|url=http://fortune.com/2017/03/23/apple-wikileaks-iphone/|title=WikiLeaks Says CIA Has Targeted iPhone Supply Chain Since 2008|last=Reisinger|first=Don|date=2017-03-23|website=Fortune|archive-url=|archive-date=|dead-url=|access-date=2017-04-02}}
21. ^{{Cite news|url=http://heavy.com/news/2017/03/what-time-will-wikileaks-vault-7-dark-matter-release-password-passcode/|title=What Time Will WikiLeaks Vault 7 Release 'Dark Matter' CIA Docs?|last=Prince|first=S.J.|date=2017-03-23|work=Heavy.com|access-date=2017-03-31|archive-url=|archive-date=|dead-url=|language=en-US}}
22. ^{{cite web |first=Hyacinth |last=Mascarenhas |url=http://www.ibtimes.co.uk/wikileaks-marble-files-latest-leak-exposes-how-cia-disguises-its-own-hacking-attacks-1614811 |title=WikiLeaks 'Marble' files: Latest leak exposes how CIA disguises its own hacking attacks |date=1 April 2017 |work=International Business Times |accessdate=3 April 2017}}
23. ^{{Cite news|url=http://heavy.com/tech/2017/03/wikileaks-vault-7-part-3-marble-cia-tool-to-mask-hacks-hacking-russian-chinese-arabic-decoy-languages-attribute/|title=WikiLeaks Vault 7 Part 3 Reveals CIA Tool Might Mask Hacks as Russian, Chinese, Arabic|last=Dwilson|first=Stephanie Dube|date=2017-03-31|work=Heavy.com|access-date=2017-04-08|archive-url=|archive-date=|dead-url=|language=en-US}}
24. ^{{Cite web|url=http://www.huffingtonpost.com/entry/wikileaks-vault-7-series-the-grasshopper-framework_us_58e7bf35e4b0acd784ca57a7|title=Wikileaks Vault 7 Series - The Grasshopper Framework|last=Supervizer|first=Payman|date=2017-04-07|website=Huffington Post|language=en-US|archive-url=|archive-date=|dead-url=|access-date=2017-04-08}}
25. ^¹{{Cite news|url=https://www.wired.co.uk/article/cia-files-wikileaks-vault-7|title=WikiLeaks drops 'Grasshopper' documents, part four of its CIA Vault 7 files|last=Burgess|first=Matt|date=2017-04-07|work=WIRED UK|access-date=2017-04-08|archive-url=|archive-date=|dead-url=|language=en-GB}}
26. ^{{Cite web|url=http://www.huffingtonpost.com/entry/wikileaks-vault-7-series-hive_us_58f0a299e4b0156697224e4a|title=Wikileaks Vault 7 Series - Hive|last=Supervizer|first=Payman|date=2017-04-14|website=Huffington Post|language=en-US|archive-url=|archive-date=|dead-url=|access-date=2017-04-18}}
27. ^{{Cite web|url=http://www.itwire.com/security/77764-vault-7-guide-to-leak-data-from-samsung-tvs-released.html|title=iTWire - Vault 7: guide to leak data from Samsung TVs released|last=Varghese|first=Sam|date=2017-04-23|website=www.itwire.com|language=en-gb|archive-url=|archive-date=|dead-url=|access-date=2017-04-25}}
28. ^{{cite web |last=Brandom |first=Russell |url=https://www.theverge.com/2017/4/25/15421326/smart-tv-hacking-cia-samsung-weeping-angel-vulnerability |title=Here's how to use the CIA's 'weeping angel' smart TV hack |date=25 April 2017 |work=The Verge |accessdate=26 April 2017}}
29. ^{{Cite news|url=https://www.mintpressnews.com/video-iphones-ispies-wikileaks-vault-7-revelations-continue-terrify/227066/|title=VIDEO: iPhones Are iSpies – Wikileaks "Vault 7" Revelations Continue To Terrify|last=Chamseddine|first=Roqayah|date=2017-04-21|work=MintPress News|access-date=2017-04-25|archive-url=|archive-date=|dead-url=|language=en-US}}
30. ^{{Cite web| last = Pachal| first = Pete| title = CIA hack of Samsung TVs was named after a Doctor Who monster| work = Mashable| accessdate = 2017-03-08| url = http://mashable.com/2017/03/07/cia-samsung-tv-hack-weeping-angel/}}
31. ^{{Cite web| last = Molina| first = Brett| title = Alleged CIA hack named after super creepy 'Doctor Who' villain| work = USA TODAY| accessdate = 2017-03-08| url = https://www.usatoday.com/story/tech/talkingtech/2017/03/07/alleged-cia-technique-named-after-doctor-who-villain/98853924/}}
32. ^{{cite web |last=Spring |first=Tom |url=https://threatpost.com/wikileaks-reveals-cia-tool-scribbles-for-document-tracking/125299/ |title=WikiLeaks Reveals CIA Tool 'Scribbles' For Document Tracking |date=28 April 2017 |work=Threatpost |accessdate=1 May 2017}}
33. ^{{Cite news|url=http://www.ibtimes.co.uk/wikileaks-publishes-user-guide-source-code-cias-secret-leaker-tracking-tool-scribbles-1619399|title=WikiLeaks publishes user guide and source code for CIA's secret leaker-tracking tool Scribbles|last=Ashok|first=India|date=2017-05-01|work=International Business Times UK|access-date=2017-05-04|archive-url=|archive-date=|dead-url=}}
34. ^{{Cite web|url=https://wikileaks.org/vault7/#Scribbles|title=WikiLeaks - Vault 7: Projects|website=wikileaks.org|access-date=2017-09-24}}
35. ^{{Cite news|url=https://www.bleepingcomputer.com/news/gaming/wikileaks-publishes-cia-anti-whistleblowers-tool-for-microsoft-office-documents/|title=WikiLeaks Publishes CIA Anti-Whistleblowers Tool for Microsoft Office Documents|work=BleepingComputer|access-date=2017-09-24|language=en-us}}
36. ^{{Cite news|url=http://securityaffairs.co/wordpress/58775/hacking/cia-archimedes-tool.html|title=WikiLeaks leaked documents that detail the Archimedes tool used by the CIA in MitM attacks|last=Paganini|first=Pierluigi|date=2017-05-05|work=Security Affairs|access-date=2017-05-13|archive-url=|archive-date=|dead-url=|language=en-US}}
37. ^¹{{Cite news|url=http://www.computerworld.com/article/3196987/security/wikileaks-posts-user-guides-for-cia-malware-implants-assassin-and-aftermidnight.html|title=WikiLeaks posts user guides for CIA malware implants Assassin and AfterMidnight|last=Storm|first=Darlene|date=2017-05-15|work=Computerworld|access-date=2017-05-17|archive-url=|archive-date=2017-05-16|dead-url=|language=en}}
38. ^{{Cite news|url=http://www.ibtimes.co.uk/new-wikileaks-dump-reveals-how-cia-hacks-spies-sabotages-software-1621980|title=New WikiLeaks dump reveals how the CIA hacks, spies and sabotages software|last=Ashok|first=India|date=2017-05-17|work=International Business Times UK|access-date=2017-05-29|archive-url=|archive-date=|dead-url=}}
39. ^{{Cite news|url=http://www.ibtimes.co.uk/wikileaks-new-dump-reveals-all-windows-versions-can-be-targeted-by-cia-spy-malware-athena-1622508|title=What is WikiLeaks' new dump Athena? All Windows versions can be hacked by this CIA spyware|last=Ashok|first=India|date=2017-05-20|work=International Business Times UK|access-date=2017-05-29|archive-url=|archive-date=|dead-url=}}
40. ^{{Cite news|url=http://www.ibtimes.co.in/what-athena-malware-windows-10-xp-pro-8-1-others-under-target-says-wikileaks-727723|title=What is Athena malware? Windows 10, XP Pro, 8.1, and others under target, says WikiLeaks|last=Ronamai|first=Raymond|date=2017-05-22|work=International Business Times, India Edition|access-date=2017-05-29|archive-url=|archive-date=|dead-url=|language=en}}
41. ^{{Cite news|url=http://www.zdnet.com/article/cias-windows-xp-to-windows-10-malware-wikileaks-reveals-athena/|title=CIA's Windows XP to Windows 10 malware: WikiLeaks reveals Athena {{!}} ZDNet|last=Tung|first=Liam|date=2017-05-22|work=CBS Interactive ZDNet|access-date=2017-05-29|archive-url=|archive-date=|dead-url=|language=en}}
42. ^{{Cite news|url=https://www.bleepingcomputer.com/news/security/cia-malware-can-switch-clean-files-with-malware-when-you-download-them-via-smb/|title=CIA Malware Can Switch Clean Files With Malware When You Download Them via SMB|work=BleepingComputer|access-date=2017-09-19|language=en-us}}
43. ^{{Cite web|url=https://wikileaks.org/vault7/#Cherry%20Blossom|title=WikiLeaks - Vault 7: Projects: Cherry Blossom|website=wikileaks.org|access-date=2018-11-01}}
44. ^{{Cite web|url=https://wikileaks.org/vault7/#Brutal%20Kangaroo|title=WikiLeaks - Vault 7: Projects: Brutal Kangaroo|website=wikileaks.org|access-date=2018-11-01}}
45. ^{{Cite web|url=https://wikileaks.org/vault7/#Elsa|title=WikiLeaks - Vault 7: Projects: Elsa|website=wikileaks.org|access-date=2018-11-01}}
46. ^{{Cite web|url=https://wikileaks.org/vault7/#OutlawCountry|title=WikiLeaks - Vault 7: Projects: OutlawCountry|website=wikileaks.org|access-date=2018-11-01}}
47. ^{{Cite web|url=https://wikileaks.org/vault7/#BothanSpy|title=WikiLeaks - Vault 7: Projects: BothanSpy|website=wikileaks.org|access-date=2018-11-01}}
48. ^{{Cite web|url=https://wikileaks.org/vault7/#Highrise|title=WikiLeaks - Vault 7: Projects: Highrise|website=wikileaks.org|access-date=2018-11-01}}
49. ^{{Cite web|url=https://wikileaks.org/vault7/#UCL%20/%20Raytheon|title=WikiLeaks - Vault 7: Projects: UCL / Raytheon|website=wikileaks.org|access-date=2018-11-01}}
50. ^{{Cite web|url=https://wikileaks.org/vault7/#Imperial|title=WikiLeaks - Vault 7: Projects: Imperial|website=wikileaks.org|access-date=2018-11-01}}
51. ^{{Cite web|url=https://wikileaks.org/vault7/#Dumbo|title=WikiLeaks - Vault 7: Projects: Dumbo|website=wikileaks.org|access-date=2018-11-01}}
52. ^{{Cite web|url=https://wikileaks.org/vault7/#CouchPotato|title=WikiLeaks - Vault 7: Projects: CouchPotato|website=wikileaks.org|access-date=2018-11-01}}
53. ^{{Cite web|url=https://wikileaks.org/vault7/#ExpressLane|title=WikiLeaks - Vault 7: Projects: ExpressLane|website=wikileaks.org|access-date=2018-11-01}}
54. ^{{Cite web|url=https://wikileaks.org/vault7/#Angelfire|title=WikiLeaks - Vault 7: Projects: Angelfire|website=wikileaks.org|access-date=2018-11-01}}
55. ^{{Cite web|url=https://wikileaks.org/vault7/#Protego|title=WikiLeaks - Vault 7: Projects: Protego|website=wikileaks.org|access-date=2018-11-01}}
56. ^{{cite news|url=http://www.realclearpolitics.com/video/2017/03/16/carlson_to_trump_why_not_gather_evidence_confront_intelligence_agencies_if_you_were_wiretapped.html|title=Carlson To Trump: Why Not Gather Evidence, Confront Intelligence Agencies If You Were Wiretapped?|last=Schwartz|first=Ian|date=16 March 2017|work=RealClearPolitics|accessdate=16 March 2017}}
57. ^¹²³⁴⁵⁶⁷⁸⁹¹⁰{{Cite news |url=https://www.nytimes.com/2017/03/07/world/europe/wikileaks-cia-hacking.html |title=WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents |last=Shane |first=Scott |date=7 March 2017 |access-date=7 March 2017 |last2=Mazzetti |first2=Mark |last3=Rosenberg |first3=Matthew |newspaper=The New York Times}}
58. ^{{cite web|url=http://abcnews.go.com/International/wikileaks-docs-allege-cia-hack-smartphones-exposes-frankfurt/story?id=45977302|title=WikiLeaks docs allege CIA can hack smartphones, expose Frankfurt listening post|first1=Brian|last1=Ross|first2=James|last2=Gordon Meek|first3=Randy|last3=Kreider|first4=Liz|last4=Kreutz|publisher=ABC News|date=8 March 2017}}
59. ^{{cite news|url=http://www.foxnews.com/on-air/tucker-carlson-tonight/index.html#/v/5361147496001|title=Trump: 'Wiretap covers a lot of different things'|last=Carlson|first=Tucker|last2=|date=15 March 2017|work=Fox News|publisher=|page=(Video)|language=English|accessdate=16 March 2017}}
60. ^{{cite news|url=http://thehill.com/policy/national-security/324313-dem-lawmaker-trump-mightve-leaked-classified-information|title=Dem lawmaker: Trump might've leaked classified information|last=Beavers|first=Olivia|date=16 March 2017|work=The Hill|accessdate=16 March 2017}}
61. ^{{cite news|url=https://www.washingtontimes.com/news/2017/mar/16/adam-schiff-donald-trump-might-have-disclosed-clas|title=Adam Schiff: Trump might have disclosed classified info in TV interview|last=Sherfinski|first=David|date=16 March 2017|work=The Washington Times}}
62. ^{{Cite web |url=https://www.boston.com/news/national-news/2017/03/07/wikileaks-publishes-cia-trove-alleging-wide-scale-hacking |title=WikiLeaks publishes CIA trove alleging wide scale hacking |last=Satter |first=Raphael |date=7 March 2017 |website=Boston.com |access-date=7 March 2017}}
63. ^¹²³⁴{{cite web|title=WikiLeaks releases 'entire hacking capacity of the CIA'|url=http://www.foxnews.com/us/2017/03/07/wikileaks-releases-entire-hacking-capacity-cia.html|work=Fox News|author=Cody Derespina|date=7 March 2017|access-date=7 March 2017}}
64. ^{{cite web |last=Collins |first=Keith |url=http://www.defenseone.com/technology/2017/04/if-you-only-work-your-malware-weekdays-you-might-be-cia-hacker/136923/ |title=If You Only Work on Your Malware on Weekdays, You Might Be a CIA Hacker |work=Defense One |publisher=Atlantic Media |accessdate=15 April 2017}}
65. ^{{cite web |url=https://www.symantec.com/connect/blogs/longhorn-tools-used-cyberespionage-group-linked-vault-7 |title=Longhorn: Tools used by cyberespionage group linked to Vault 7 |publisher=Symantec |accessdate=15 April 2017}}
66. ^{{cite news|first1=John|last1=Goetz|authorlink1=John Goetz|first2=Frederik|last2=Obermaier|authorlink2=Frederik Obermaier|url=http://www.sueddeutsche.de/politik/wikileaks-frankfurter-us-generalkonsulat-soll-spionagezentrale-sein-1.3409364|title=Frankfurter US-Konsulat soll Spionagezentrale sein|trans-title=Frankfurt's US Consulate appears to be an espionage center|work=Süddeutsche Zeitung|language=de|date=7 March 2017}}
67. ^{{cite news |author=Dirk Hautkapp |title=Internet-Methoden der CIA enthüllt |url=https://www.waz.de/politik/internet-methoden-der-cia-enthuellt-id209874865.html |work=Westdeutsche Allgemeine Zeitung |date=9 March 2017 |access-date=April 17, 2017 }}
68. ^German Foreign Minister Gabriel fears new arms race with Russia, Deutsche Welle, 9 March 2017
69. ^{{cite news|title=CIA false flag team repurposed Shamoon data wiper, other malware|url=http://www.pcworld.com/article/3178365/security/cia-false-flag-team-repurposed-shamoon-data-wiper-other-malware.html|accessdate=12 March 2017|work=PCWorld|language=en}}
70. ^¹{{cite web |last=Zetter |first=Kim |author-link=Kim Zetter |url=https://theintercept.com/2017/03/08/wikileaks-files-show-the-cia-repurposing-foreign-hacking-code-to-save-time-not-to-frame-russia/ |title=WikiLeaks Files Show the CIA Repurposing Hacking Code To Save Time, Not To Frame Russia |work=The Intercept |accessdate=9 March 2017}}
71. ^{{cite web |last=Cimpanu |first=Catalin |url=https://www.bleepingcomputer.com/news/security/vault-7-cia-borrowed-code-from-public-malware/ |title=Vault 7: CIA Borrowed Code from Public Malware |work=Bleeping Computer |accessdate=8 March 2017}}
72. ^¹{{cite web |last=Tani |first=Maxwell |url=http://www.businessinsider.com/sean-hannity-wikileaks-conspiracy-theory-cia-hacked-2017-3 |title=Conservative media figures are embracing a wild WikiLeaks conspiracy theory that the CIA hacked the DNC, and then framed Russia |date=9 March 2017 |work=Business Insider |accessdate=12 March 2017}}
73. ^{{cite web |last=Blake |first=Aaron |url=https://www.washingtonpost.com/news/the-fix/wp/2017/03/10/the-dangerous-and-irresistible-gop-conspiracy-theory-that-explains-away-trumps-russia-problem/ |title=Analysis - The dangerous and irresistible GOP conspiracy theory that explains away Trump's Russia problem |work=The Washington Post |accessdate=12 March 2017}}
74. ^{{cite web|last1=Buchanan|first1=Ben|title=WikiLeaks doesn't raise doubts about who hacked the DNC. We still know it was Russia.|url=https://www.washingtonpost.com/opinions/russia-likely-hacked-the-dnc-and-new-wikileaks-revelations-strengthen-the-case/2017/03/09/e5fe55e8-04d6-11e7-b1e9-a05d3c21f7cf_story.html|website=The Washington Post|accessdate=12 March 2017|date=9 March 2017}}
75. ^¹²{{cite web |last=Poulsen |first=Kevin |url=http://www.thedailybeast.com/articles/2017/03/08/who-s-behind-the-massive-cia-leak.html |title=Russia Turns WikiLeaks CIA Dump Into Disinformation |date=8 March 2017 |work=The Daily Beast |accessdate=12 March 2017}}
76. ^Jacques Cheminat: Marble Framework: le double jeu perfide des hackers de la CIA, silicon.fr, 31 March 2017
77. ^Stefania Maurizi: WikiLeaks, così la Cia depista i raid nei computer: svelato il 'Marble Framework', La Repubblica, 31 March 2017
78. ^Jean-Marc Manach: WikiLeaks joue à cache-cache avec la CIA, Libération, 31 March 2017
79. ^{{cite web |last=Cimpanu |first=Catalin |url=https://www.bleepingcomputer.com/news/government/wikileaks-dumps-source-code-of-cia-tool-called-marble/ |title=WikiLeaks Dumps Source Code of CIA Tool Called Marble |work=Bleeping Computer |date=1 April 2017 |accessdate=3 April 2017}}
80. ^Sam Varghese: WikiLeaks releases third tranche of CIA files, iTWire', 1 April 2017
81. ^{{Cite news|url=http://heavy.com/tech/2017/03/wikileaks-vault-7-part-3-marble-cia-tool-to-mask-hacks-hacking-russian-chinese-arabic-decoy-languages-attribute/|title=WikiLeaks Vault 7 Part 3 Reveals CIA Tool Might Mask Hacks as Russian, Chinese, Arabic|last=Dwilson|first=Stephanie Dube|date=2017-03-31|work=Heavy.com|access-date=2017-03-31|archive-url=|archive-date=|dead-url=|language=en-US}}
82. ^¹John Leyden: [https://www.theregister.co.uk/2017/03/31/wikileaks_cia/ WikiLeaks exposes CIA anti-forensics tool that makes Uncle Sam seem fluent in enemy tongues], The Register, 31 March 2017
83. ^{{cite web|url=http://thehill.com/policy/cybersecurity/326691-wikileaks-newest-cia-source-code-leak-shows-how-cia-avoids-anti-virus|title=WikiLeaks' latest leak shows how CIA avoids antivirus programs|last=Uchill|first=Joe|date=31 March 2017|website=|publisher=The Hill|archive-url=|archive-date=|dead-url=|accessdate=31 March 2017}}
84. ^The Washington Post: [https://www.washingtonpost.com/world/national-security/wikileaks-latest-release-of-cia-cyber-tools-could-blow-the-cover-on-agency-hacking-operations/2017/03/31/63fc3616-1636-11e7-833c-503e1f6394c9_story.html WikiLeaks’ latest release of CIA cyber-tools could blow the cover on agency hacking operations], The Washington Post, 31 March 2017
85. ^[https://arstechnica.com/security/2017/04/wikileaks-releases-code-that-could-unmask-cia-hacking-operations/ Wikileaks releases code that could unmask CIA hacking operations], Ars Technica, 2 April 2017
86. ^{{Cite web|url=https://wikileaks.org/ciav7p1/cms/page_17072172.html|title=HammerDrill v2.0|website=wikileaks.org|language=en|access-date=19 March 2017}}
87. ^{{Cite web|url=http://www.recode.net/2017/3/7/14846926/cia-code-names-surveillance-wikileaks|title=Weeping Angel, Brutal Kangaroo and other secret CIA code names from the Wikileaks surveillance leak|website=www.recode.net|language=en|access-date=19 March 2017}}
88. ^{{cite web |last=McCormick |first=Rich |url=https://www.theverge.com/2017/3/8/14851266/apple-patch-wikileaks-cia-dump-ios |title=Apple says it's already patched 'many' iOS vulnerabilities identified in WikiLeaks' CIA dump|date=8 March 2017 |work=The Verge |accessdate=8 March 2017}}
89. ^[https://wikileaks.org/vault7/darkmatter/releases Releases Dark Matter], WikiLeaks, 23 March 2017
90. ^[https://www.independent.co.uk/life-style/gadgets-and-tech/news/wikileaks-cia-dark-matter-hacking-leak-apple-iphone-ipad-new-vault-7-files-latest-a7646751.html WikiLeaks CIA files: New 'Dark Matter' release details how US 'hacked into Apple products'], The Independent, 23 March 2017
91. ^{{cite web |last=Uchill |first=Joe |url=http://thehill.com/business-a-lobbying/325579-apple-new-wikileaked-vulnerabilities-no-longer-work |title=Apple: Security vulnerabilities revealed by WikiLeaks no longer work |date=23 March 2017 |work=The Hill |accessdate=24 March 2017}}
92. ^{{cite web |last=Gallagher |first=Sean |url=https://arstechnica.com/security/2017/03/new-wikileaks-dump-the-cia-built-thunderbolt-exploit-implants-to-target-macs/ |title=New WikiLeaks dump: The CIA built Thunderbolt exploit, implants to target Macs |work=Ars Technica |date=23 March 2017 |accessdate=24 March 2017}}
93. ^William Suberg: [https://cointelegraph.com/news/vault-7-volume-ii-apple-patch-claims-duplicitous-says-wikileaks Vault 7 Volume II: Apple Patch Claims “Duplicitous,” Says WikiLeaks], The Cointelegraph, 24 March 2017
94. ^https://twitter.com/wikileaks/status/843573087950069764
95. ^¹http://www.securityweek.com/cisco-finds-zero-day-vulnerability-vault-7-leak
96. ^Joseph Menn: [https://www.reuters.com/article/us-usa-cyber-defense-idUSKBN17013U A scramble at Cisco exposes uncomfortable truths about U.S. cyber defense], Reuters, 29. March 2017
97. ^{{cite web |last=Goodin |first=Dan |url=https://arstechnica.com/security/2017/03/a-simple-command-allows-the-cia-to-commandeer-318-models-of-cisco-switches/ |title=A simple command allows the CIA to commandeer 318 models of Cisco switches |date=20 March 2017 |work=Ars Technica |accessdate=21 March 2017}}
98. ^¹²{{cite web |last=Barrett |first=Brian |url=https://www.wired.com/2017/03/wikileaks-cia-hack-signal-encrypted-chat-apps/ |title=The CIA Can't Crack Signal and WhatsApp Encryption, No Matter What You've Heard |publisher=Wired |date=7 March 2017 |accessdate=8 March 2017}}
99. ^{{cite web|last1=Glaser|first1=April|title=WikiLeaks Reveals The CIA Hacked Into Apple IPhones.|url=http://www.recode.net/2017/3/7/14843494/wikileaks-cia-hacked-apple-iphone-google-androidsamsung|website=ReCode|accessdate=17 March 2017|date=7 March 2017}}
100. ^¹{{cite web|title=WikiLeaks 'Vault 7' dump reignites conspiracy theories surrounding death of Michael Hastings|url=http://www.nzherald.co.nz/world/news/article.cfm?c_id=2&objectid=11814476|work=The New Zealand Herald|author=|date=8 March 2017|access-date=8 March 2017}}
101. ^{{Cite web |url=http://heavy.com/news/2017/03/wikileaks-vault-7-remote-car-hack-assassination-michael-hastings-conspiracy/ |title=WikiLeaks Vault 7 Conspiracy: Michael Hastings Assassinated by CIA Remote Car Hack? |last=Prince |first=S. J. |date=7 March 2017 |website=Heavy.com |access-date=8 March 2017}}
102. ^{{Cite web|url=https://notepad-plus-plus.org/news/notepad-7.3.3-fix-cia-hacking-issue.html|title=Notepad++ Fix CIA Hacking Issue|website=notepad-plus-plus.org|language=en-AU|access-date=10 March 2017}}
103. ^{{cite tweet|number=839171129331830784|user=Snowden|title=The CIA reports show the USG ...|accessdate=8 March 2017|language=en|date=7 March 2017}}
104. ^{{cite web|title=Alleged CIA documents show urgent need to limit government hacking – Access Now|url=https://www.accessnow.org/alleged-cia-documents-highlight-urgent-need-limits-government-hacking/|publisher=Access Now|accessdate=8 March 2017|date=7 March 2017}}
105. ^{{cite web|url=https://www.forbes.com/sites/leemathews/2017/03/08/the-wikileaks-vault-7-cia-dump-shouldnt-terrify-you/|title=WikiLeaks Vault 7 CIA Dump Offers Nothing But Old News|last=Mathews|first=Lee|work=Forbes|accessdate=9 March 2017}}
106. ^{{cite web|last1=Hern|first1=Alex|title='Am I at risk of being hacked?' What you need to know about the 'Vault 7' documents|url=https://www.theguardian.com/technology/2017/mar/08/wikileaks-vault-7-cia-documents-hacked-what-you-need-to-know|publisher=The Guardian|accessdate=11 March 2017|date=8 March 2017}}
107. ^{{cite web|last1=Hern|first1=Alex|title=Apple to 'rapidly address' any security holes as companies respond to CIA leak|url=https://www.theguardian.com/technology/2017/mar/08/wikileaks-cia-leak-apple-vault-7-documents|publisher=The Guardian|accessdate=11 March 2017|date=8 March 2017}}
108. ^{{cite web |last1=Domonoske |first1=Camila |last2=Myre |first2=Greg |url=https://www.npr.org/sections/thetwo-way/2017/03/08/519205172/the-cia-document-dump-isn-t-exactly-snowden-2-0-here-s-why |title=The CIA Document Dump Isn't Exactly Snowden 2.0. Here's Why |work=NPR |accessdate=15 March 2017}}
109. ^{{cite web|title=Privacy experts say the CIA left Americans open to cyber attacks|url=http://www.newsweek.com/privacy-experts-cia-americans-open-cyber-attacks-580659|publisher=Newsweek|accessdate=9 April 2017|language=en|date=8 April 2017}}
110. ^{{cite web |last=Riotta |first=Chris |url=http://www.ibtimes.com/privacy-real-cia-jeopardizing-americas-digital-security-experts-warn-2514062 |title=Is Privacy Real? The CIA Is Jeopardizing America's Digital Security, Experts Warn |date=24 March 2017 |work=International Business Times |accessdate=9 April 2017}}
111. ^{{cite web |last=Whittaker |first=Zack |url=http://www.zdnet.com/article/tech-giants-scramble-for-cia-hacking-fixes-most-flaws-patched/|title=After CIA leaks, tech giants scramble to patch security flaws |date=9 March 2017 |work=ZDNet |accessdate=9 April 2017}}
112. ^Olivia Solon: [https://www.theguardian.com/world/2017/mar/09/with-the-latest-wikileaks-revelations-about-the-cia-is-privacy-really-dead With the latest WikiLeaks revelations about the CIA – is privacy really dead?], The Guardian, 8 March 2017
113. ^{{Cite news|url=https://blogs.microsoft.com/on-the-issues/2017/05/14/need-urgent-collective-action-keep-people-safe-online-lessons-last-weeks-cyberattack/|title=The need for urgent collective action to keep people safe online: Lessons from last week's cyberattack - Microsoft on the Issues|last=Smith|first=Brad|date=2017-05-14|work=Microsoft|access-date=2017-05-17|archive-url=|archive-date=|dead-url=|language=en-US}}