By Joseph Menn SAN FRANCISCO (Reuters) - The U.S. National Security Agency has figured out how to hide spying software deep within hard drives made by Western Digital, Seagate, Toshiba and other top manufacturers, giving the agency the means to eavesdrop on the majority of the world's computers, according to cyber researchers and former operatives. That long-sought and closely guarded ability was part of a cluster of spying programs discovered by Kaspersky Lab, the Moscow-based security software maker that has exposed a series of Western cyberespionage operations. Kaspersky said it found personal computers in 30 countries infected with one or more of the spying programs, with the most infections seen in Iran, followed by Russia, Pakistan, Afghanistan, China, Mali, Syria, Yemen and Algeria. The targets included government and military institutions, telecommunication companies, banks, energy companies, nuclear researchers, media, and Islamic activists, Kaspersky said. (http://reut.rs/1L5knm0) The firm declined to publicly name the country behind the spying campaign, but said it was closely linked to Stuxnet, the NSA-led cyberweapon that was used to attack Iran's uranium enrichment facility. The NSA is the agency responsible for gathering electronic intelligence on behalf of the United States. A former NSA employee told Reuters that Kaspersky's analysis was correct, and that people still in the intelligence agency valued these spying programs as highly as Stuxnet. Another former intelligence operative confirmed that the NSA had developed the prized technique of concealing spyware in hard drives, but said he did not know which spy efforts relied on it. NSA spokeswoman Vanee Vines declined to comment. Kaspersky published the technical details of its research on Monday, which should help infected institutions detect the spying programs, some of which trace back as far as 2001. The disclosure could further hurt the NSA's surveillance abilities, already damaged by massive leaks by former contractor Edward Snowden. Snowden's revelations have hurt the United States' relations with some allies and slowed the sales of U.S. technology products abroad. The exposure of these new spying tools could lead to greater backlash against Western technology, particularly in countries such as China, which is already drafting regulations that would require most bank technology suppliers to proffer copies of their software code for inspection. Peter Swire, one of five members of U.S. President Barack Obama's Review Group on Intelligence and Communications Technology, said the Kaspersky report showed that it is essential for the country to consider the possible impact on trade and diplomatic relations before deciding to use its knowledge of software flaws for intelligence gathering. "There can be serious negative effects on other U.S. interests," Swire said. TECHNOLOGICAL BREAKTHROUGH According to Kaspersky, the spies made a technological breakthrough by figuring out how to lodge malicious software in the obscure code called firmware that launches every time a computer is turned on. Disk drive firmware is viewed by spies and cybersecurity experts as the second-most valuable real estate on a PC for a hacker, second only to the BIOS code invoked automatically as a computer boots up. "The hardware will be able to infect the computer over and over," lead Kaspersky researcher Costin Raiu said in an interview. Though the leaders of the still-active espionage campaign could have taken control of thousands of PCs, giving them the ability to steal files or eavesdrop on anything they wanted, the spies were selective and only established full remote control over machines belonging to the most desirable foreign targets, according to Raiu. He said Kaspersky found only a few especially high-value computers with the hard-drive infections. Kaspersky's reconstructions of the spying programs show that they could work in disk drives sold by more than a dozen companies, comprising essentially the entire market. They include Western Digital Corp, Seagate Technology Plc, Toshiba Corp, IBM, Micron Technology Inc and Samsung Electronics Co Ltd. Western Digital, Seagate and Micron said they had no knowledge of these spying programs. Toshiba and Samsung declined to comment. IBM did not respond to requests for comment. GETTING THE SOURCE CODE Raiu said the authors of the spying programs must have had access to the proprietary source code that directs the actions of the hard drives. That code can serve as a roadmap to vulnerabilities, allowing those who study it to launch attacks much more easily. "There is zero chance that someone could rewrite the [hard drive] operating system using public information," Raiu said. Concerns about access to source code flared after a series of high-profile cyberattacks on Google Inc and other U.S. companies in 2009 that were blamed on China. Investigators have said they found evidence that the hackers gained access to source code from several big U.S. tech and defense companies. It is not clear how the NSA may have obtained the hard drives' source code. Western Digital spokesman Steve Shattuck said the company "has not provided its source code to government agencies." The other hard drive makers would not say if they had shared their source code with the NSA. Seagate spokesman Clive Over said it has "secure measures to prevent tampering or reverse engineering of its firmware and other technologies." Micron spokesman Daniel Francisco said the company took the security of its products seriously and "we are not aware of any instances of foreign code." According to former intelligence operatives, the NSA has multiple ways of obtaining source code from tech companies, including asking directly and posing as a software developer. If a company wants to sell products to the Pentagon or another sensitive U.S. agency, the government can request a security audit to make sure the source code is safe. "They don't admit it, but they do say, 'We're going to do an evaluation, we need the source code,'" said Vincent Liu, a partner at security consulting firm Bishop Fox and former NSA analyst. "It's usually the NSA doing the evaluation, and it's a pretty small leap to say they're going to keep that source code." Kaspersky called the authors of the spying program "the Equation group," named after their embrace of complex encryption formulas. The group used a variety of means to spread other spying programs, such as by compromising jihadist websites, infecting USB sticks and CDs, and developing a self-spreading computer worm called Fanny, Kasperky said. Fanny was like Stuxnet in that it exploited two of the same undisclosed software flaws, known as "zero days," which strongly suggested collaboration by the authors, Raiu said. He added that it was "quite possible" that the Equation group used Fanny to scout out targets for Stuxnet in Iran and spread the virus. (Reporting by Joseph Menn; Editing by Tiffany Wu)
Our goal is to create a safe and engaging place for users to connect over interests and passions. In order to improve our community experience, we are temporarily suspending article commenting
Warriors owner suddenly mentioned the benefits of team-friendly discounts while discussing Stephen Curry's future
Joe Lacob, unprompted, noted that Kevin Durant took less money to stay with the Warriors while discussing Steph Curry's possible free agency in 2022.
- Business Insider
A British army email mishap publicly mentioned a military intel unit so secretive its members are banned from social media
E Squadron is a secretive unit in the secretive world of British special operations, tasked with high-risk operations overseas.
A former police chief says he questioned Prince Charles over a note Princess Diana wrote predicting her own death
Former police chief Lord Stevens told the Daily Mail he interviewed Charles as a witness, not a suspect, in the investigation into Diana's death.
Pete Davidson says he doesn't know if he'd still be working if he had been on any show besides 'SNL' while struggling with his mental health
The 27-year-old stand-up comedian became a cast member on NBC's "Saturday Night Live" seven years ago.
- The Week
Britney Spears' father is reportedly living in an RV in Louisiana despite a $16,000/month salary as her conservator
- Miami Herald
One wonders sometimes if the Democrats really get it.
- Yahoo News
President Biden continues to hold a higher approval rating than former President Donald Trump ever recorded in office, polls show. But the public's support for the new president appears to be weakening as his agenda has stalled in Congress.
- Miami Herald
A federal inmate who may have been high on drugs threatened to slug a correctional officer before being pepper sprayed, and then he ran directly into a concrete wall — an impact that led to his death from a head injury, according to sources familiar with the incident at a Miami lockup.
Should Derek Chauvin face 30 years in prison? Criminal justice reform advocates say a long sentence would do more harm than good
"People do have a right to celebrate a guilty verdict," said activist Katherin Hervey. "However, our calls for extremely hard sentencing are really just doing more violence."
- Lexington Herald-Leader
Fights and accidents caused gruesome injuries during the five-day “country party.”
- Business Insider
Texas Gov. Abbott vetoed a state animal-cruelty bill, saying the Safe Outdoor Dogs Act was 'micro-managing'
The Texas lawmaker who wrote the bill told CBS Austin that he hadn't heard from the governor about it.
- The Telegraph
Egyptian police on Tuesday arrested a Tiktok star who has been sentenced to 10 years imprisonment for her posts on social media. Haneen Hossam, a 20-year-old Cairo University student who became an influencer on video sharing app Tiktok, was sentenced in absentia on Sunday alongside four others. While all five were fined 2,000 Egyptian pounds (£9,160) for encouraging women to share videos in exchange for money, which Egyptian authorities equated to human trafficking, Ms Hossam received a harsher
- Business Insider
Operatives who killed Saudi dissident journalist Jamal Khashoggi received training in the US, New York Times reports
The contract for the paramilitary training was approved by the State Department, The New York Times reported Tuesday.
2-year-old Eliza died of cancer after millions followed her journey on TikTok, mom Kate Hudson announced
Hudson posted on Instagram that her daughter Eliza had died of cancer. Hudson and her fiancé documented their treatment journey on TikTok.
Simone Biles says she faces an unfair disadvantage in scoring because she's 'already way ahead of everybody'
"I'm almost 99.9% sure if any other athlete were to do it besides me, they would give it correct credit," Biles said in "Simone vs Herself."
- LA Times
It didn't take long for Alex Verdugo to win over Red Sox fans despite being associated with the Mookie Betts trade — and the former Dodger is thriving.
- Business Insider
Hotel workers keep switching jobs for 'minor salary bumps' during the US labor shortage, a hotel owner said. Some don't even show up for their first shift.
Hotels are scrambling to recruit employees during the labor shortage, and staff are leaving to other chains for "minor salary bumps," one owner said.
- The Telegraph
Vladimir Putin, the Russian president, has used the anniversary of the Nazi invasion of the Soviet Union to lash out at Nato’s expansion in Europe in a clear message to Ukraine. The Russian leader, in an opinion piece published by Germany’s Die Zeit newspaper on Tuesday, exactly 80 years after Nazi troops invaded the Soviet Union, criticised the expansion of Nato as threatening Russia’s security and fostering “Cold War-era dividing lines” in Europe. Moscow has been rattled by the fact that forme
- Charlotte Observer
Abortion is not a ‘choice’ when you live 200 miles from the nearest clinic or can’t afford to pay for healthcare. (NC Voices)
Billie Eilish says she's 'appalled and embarrassed' by a resurfaced video that shows her mouthing an anti-Asian slur
The clip, which has been shared widely on TikTok, showed Eilish mouthing along to Tyler, the Creator's 2011 song "Fish."