EXREME PROTON FLUX EVENT > Powerful Solar Burst/Sunday Quake Warning!

Here's the problem > watch and listen

Published on Jul 14, 2017

Views: 3528

Long Duration Solar Flare Rushes Toward Our Planet.
All Links @ http://www.BPEarthWatch.Com

Bastille Day: Why It's Celebrated Today > Significance

It was my pleasure many years ago to help celebrate Bastille Day in New York City with the French Consulate at The Loeb Boathouse inside Central Park while Executive Chef for Special Events at that landmark location . . .  usually with about 1200 people enjoying the foods and wines of France.

Published on Jul 13, 2017

The Bastille was a prison where political dissidents were locked up - it is celebrated annually on July 14th to commemorate the historical storming. 

The day itself celebrates the french national motto, 'liberty, equality and fraternity,'

ICYMI > Highrise + BothanSpy More CIA Listening Posts

Highrise

13 July, 2017

Today, July 13th 2017, WikiLeaks publishes documents from the Highrise project of the CIA. HighRise is an Android application designed for mobile devices running Android 4.0 to 4.3. It provides a redirector function for SMS messaging that could be used by a number of IOC tools that use SMS messages for communication between implants and listening posts. HighRise acts as a SMS proxy that provides greater separation between devices in the field ("targets") and the listening post (LP) by proxying "incoming" and "outgoing" SMS messages to an internet LP.

Highrise provides a communications channel between the HighRise field operator and the LP with a TLS/SSL secured internet communication.

Source > https://wikileaks.org/vault7/#Highrise 

 

 

 

Vault 7 Leaks : CIA Android Hacking Tool “HighRise” Steals Data From Compromised Android Phones via SMS – WikiLeaks

BALAJI N - July 13, 2017

WikiLeaks Revealed a CIA Secret Document of  Android Mobile Hacking Tool called “HighRise” steal the victims Android smartphones data and send to CIA Control server using SMS messages for communication between Victims and CIA Controlled listener posts.

WikiLeaks Revealed Few days before Another CIA Cyber Weapons called “BothanSpy” and “Gyrfalcon” steals the SSH Credentials from both Windows and Linux Platform.

Read more > https://gbhackers.com/vault-7-leaks-cia-android-hacking-tool-highrise-steals-data-from-compromised-android-phones-via-sms-WikiLeaks/ 

Highrise is a Malicious Android Application Developed by CIA for mobile devices running Android 4.0 to 4.3 with Redirection Function for SMS messaging. And it acts as an SMS proxy for communication between implants and listening posts.

This Application separates the targets and listening port by an act as a proxy and incoming SMS Messages received by HighRise via the Internet and  Send “outgoing” SMS messages via the HighRise host to CIA  listener.
HighRise Provide Highly Encrypted communication channels between Highrise filed operator (targeted victims) and listener posts over TLS/SSL secured internet communications.

 

 

BothanSpy

6 July, 2017

Today, July 6th 2017, WikiLeaks publishes documents from the BothanSpy and Gyrfalcon projects of the CIA. The implants described in both projects are designed to intercept and exfiltrate SSH credentials but work on different operating systems with different attack vectors.

 

 

BothanSpy is an implant that targets the SSH client program Xshell on the Microsoft Windows platform and steals user credentials for all active SSH sessions. These credentials are either username and password in case of password-authenticated SSH sessions or username, filename of private SSH key and key password if public key authentication is used. BothanSpy can exfiltrate the stolen credentials to a CIA-controlled server (so the implant never touches the disk on the target system) or save it in an enrypted file for later exfiltration by other means. BothanSpy is installed as a Shellterm 3.x extension on the target machine.

Gyrfalcon is an implant that targets the OpenSSH client on Linux platforms (centos,debian,rhel,suse,ubuntu).

The implant can not only steal user credentials of active SSH sessions, but is also capable of collecting full or partial OpenSSH session traffic. All collected information is stored in an encrypted file for later exfiltration. It is installed and configured by using a CIA-developed root kit (JQC/KitV) on the target machine.

Links to Leaked Docs can be found on this page link

 

 

MORE >> Previous Vault 7 CIA Leaks
Last week, WikiLeaks dumped two alleged CIA implants that allowed the agency to intercept and exfiltrate SSH credentials from targeted Windows and Linux operating systems using different attack vectors.
Dubbed BothanSpy, implant for Microsoft Windows Xshell client, and Gyrfalcon, targets the OpenSSH client on various distributions of Linux OS, including CentOS, Debian, RHEL (Red Hat), openSUSE and Ubuntu.Since March, the whistleblowing group has published 16 batches of "Vault 7" series, which includes the latest and last week leaks, along with the following:

• OutlawCountry – An alleged CIA project that allowed it to hack and remotely spy on computers running the Linux operating systems.
• ELSA – Alleged CIA malware that tracks geo-location of targeted computers and laptops running the Microsoft Windows operating system.
• Brutal Kangaroo – A tool suite for Microsoft's Windows used by the spying agency to target closed networks or air-gapped computers within an organisation or enterprise without requiring any direct access.
• Cherry Blossom – An agency's framework used for monitoring the Internet activity of the targeted systems by exploiting vulnerabilities in Wi-Fi devices.
• Pandemic – A CIA's project that allowed the agency to turn Windows file servers into covert attack machines that can silently infect other computers of interest inside a targeted network.
• Athena – An agency's spyware framework that has been developed to take full control of the infected Windows machines remotely, and works for every version of Microsoft's Windows operating systems, from XP to Windows 10.
• AfterMidnight and Assassin – Two CIA malware frameworks for the Windows platform that has been designed to monitor activities on the infected remote host computer and execute malicious actions.
• Archimedes – Man-in-the-middle attack tool allegedly developed by the CIA to target computers inside a Local Area Network (LAN).
• Scribbles – Software reportedly designed to embed 'web beacons' into confidential documents, allowing the agency to track insiders and whistleblowers.
• Grasshopper – Framework that allowed the CIA hackers to easily create their custom malware for breaking into Microsoft's Windows OS and bypassing antivirus protection.
• Marble – Source code of a secret anti-forensic framework used by the agency to hide the actual source of its malware.
• Dark Matter – Hacking exploits the spying agency designed to target iOS and Mac systems.
• Weeping Angel – Spying tool used by the CIA hackers to infiltrate smart TVs, transforming them into covert microphones.
• Year Zero – Alleged CIA hacking exploits for popular software and hardware.

 

How CIA Agents Covertly Steal Data From Hacked Smartphones (Without Internet)

2017-07-13T04:40:00-11:00Thursday, July 13, 2017

WikiLeaks has today published the 16th batch of its ongoing Vault 7 leak, this time instead of revealing new malware or hacking tool, the whistleblower organisation has unveiled how CIA operatives stealthy collect and forward stolen data from compromised smartphones.
Previously we have reported about several CIA hacking tools, malware and implants used by the agency to remotely infiltrate and steal data from the targeted systems or smartphones.
However, this time neither Wikileaks nor the leaked CIA manual clearly explains how the agency operatives were using this tool.

Source: http://thehackernews.com/2017/07/cia-smartphone-hacking-tool.html

". . . But, since we have been covering every CIA leak from the very first day, we have understood a possible scenario and have illustrated how this newly revealed tool was being used.
Explained: How CIA Highrise Project Works

In general, the malware uses the internet connection to send stolen data after compromising a machine to the attacker-controlled server (listening posts), but in the case of smartphones, malware has an alternative way to send stolen data to the attackers i.e. via SMS.
But for collecting stolen data via SMS, one has to deal with a major issue – to sort and analyse bulk messages received from multiple targeted devices.
To solve this issue, the CIA created a simple Android application, dubbed Highrise, which works as an SMS proxy between the compromised devices and the listening post server.
"There are a number of IOC tools that use SMS messages for communication and HighRise is a SMS proxy that provides greater separation between devices in the field ("targets") and the listening post" by proxying ""incoming" and "outgoing" SMS messages to an internet LP," the leaked CIA manual reads.

What I understood after reading the manual is that CIA operatives need to install an application called "TideCheck" on their Android devices, which are set to receive all the stolen data via SMS from the compromised devices. . . "

Previous Vault 7 CIA Leaks
Last week, WikiLeaks dumped two alleged CIA implants that allowed the agency to intercept and exfiltrate SSH credentials from targeted Windows and Linux operating systems using different attack vectors.
Dubbed BothanSpy — implant for Microsoft Windows Xshell client, and Gyrfalcon — targets the OpenSSH client on various distributions of Linux OS, including CentOS, Debian, RHEL (Red Hat), openSUSE and Ubuntu.
Since March, the whistleblowing group has published 16 batches of "Vault 7" series, which includes the latest and last week leaks, along with the following batches:

• OutlawCountry – An alleged CIA project that allowed it to hack and remotely spy on computers running the Linux operating systems.
• ELSA – Alleged CIA malware that tracks geo-location of targeted computers and laptops running the Microsoft Windows operating system.
• Brutal Kangaroo – A tool suite for Microsoft's Windows used by the spying agency to target closed networks or air-gapped computers within an organisation or enterprise without requiring any direct access.
• Cherry Blossom – An agency's framework used for monitoring the Internet activity of the targeted systems by exploiting vulnerabilities in Wi-Fi devices.
• Pandemic – A CIA's project that allowed the agency to turn Windows file servers into covert attack machines that can silently infect other computers of interest inside a targeted network.
• Athena – An agency's spyware framework that has been developed to take full control of the infected Windows machines remotely, and works for every version of Microsoft's Windows operating systems, from XP to Windows 10.
• AfterMidnight and Assassin – Two CIA malware frameworks for the Windows platform that has been designed to monitor activities on the infected remote host computer and execute malicious actions.
• Archimedes – Man-in-the-middle attack tool allegedly developed by the CIA to target computers inside a Local Area Network (LAN).
• Scribbles – Software reportedly designed to embed 'web beacons' into confidential documents, allowing the agency to track insiders and whistleblowers.
• Grasshopper – Framework that allowed the CIA hackers to easily create their custom malware for breaking into Microsoft's Windows OS and bypassing antivirus protection.
• Marble – Source code of a secret anti-forensic framework used by the agency to hide the actual source of its malware.
• Dark Matter – Hacking exploits the spying agency designed to target iOS and Mac systems.
• Weeping Angel – Spying tool used by the CIA hackers to infiltrate smart TVs, transforming them into covert microphones.
• Year Zero – Alleged CIA hacking exploits for popular software and hardware.

Gotta Get My Piece-of-Pie Every Week > Juicy

Hardly the Rumble ...

Published on Jul 9, 2017

Views: 148,726

The G20 becomes the G19.


To use this video in a commercial player or in broadcasts, please email licensing@storyful.com”

KerPlunk! Full Split/Largest IceBerg in History

Just a natural thing, huh?

Published on Jul 12, 2017

Views: 3,787

Satellite Images and Report. http://www.projectmidas.org/blog/calv...
All Links @ http://www.BPEarthWatch.Com

BEA News: New Foreign Direct Investment in the United States, 2014-2016

EMBARGOED UNTIL RELEASE AT 8:30 A.M. EDT, Wednesday, July 12, 2017

Expenditures by Foreign Direct Investors for New Investment in the United States, 2014 – 2016

Blogger Note: Infographic insert for comparison to text release

Expenditures by foreign direct investors to acquire, establish, or expand U.S. businesses totaled $373.4 billion in 2016.
Spending was down 15 percent from $439.6 billion in 2015, but was above the annual average of $350.0 billion for 2014-2015, and was well above the annual average of $226.0 billion for 2006-2008. As in previous years, expenditures to acquire existing businesses accounted for a large majority of the total.
More details here > https://www.bea.gov/international/di1fdinew.htm
With this release, the Bureau of Economic Analysis (BEA) is introducing new tables that present planned expenditures for greenfield investments—investments to either establish a new U.S. business or to expand an existing foreign-owned U.S. business—both as they were reported when the investment was initiated and as they were reported a year later.

In 2016

• expenditures for acquisitions were $365.7 billion
• expenditures to establish new U.S. businesses were $5.6 billion
• expenditures to expand existing foreign-owned businesses were $2.2 billion.

Planned total expenditures, which include both first-year (2016) and planned future expenditures, were $387.7 billion.
Expenditures by industry, country, and state in 2016
By industry, expenditures for new direct investment were distributed widely.
Expenditures in manufacturing, $129.4 billion, accounted for more than one third of total expenditures, the largest share among major industries.
Within manufacturing, expenditures were largest in chemicals, $64.7 billion. There were also notable expenditures in professional, scientific, and technical services ($59.1 billion) and in finance and insurance ($47.9 billion).
By country of ultimate beneficial owner (UBO), a small number of countries accounted for most of the investment.
The largest source country was Canada, with expenditures of $58.5 billion. There were also substantial expenditures from the United Kingdom ($54.5 billion), Ireland ($35.4 billion), and Switzerland ($34.9 billion).
By region, about one-half of the new investment in 2016 was from Europe and nearly one-quarter was from the Asia and Pacific region.
By U.S. state, the largest expenditures were for U.S. businesses in California ($64.7 billion), followed by Illinois ($41.3 billion).
Greenfield expenditures
Greenfield investment expenditures were $7.7 billion in 2016. Total planned greenfield expenditures for investment initiated in 2016, which include both first-year expenditures and planned spending in other years, were $22.0 billion.
By U.S. industry, greenfield expenditures in 2016 were largest in real estate and rental and leasing at $1.6 billion, accounting for 21 percent of total greenfield expenditures. By U.S. state, greenfield expenditures in 2016 were largest in California ($1.3 billion) and New York ($1.2 billion).
Employment by newly acquired, established, or expanded foreign-owned businesses
In 2016, newly acquired, established, or expanded foreign-owned businesses in the United States employed 480,800 workers. Total planned employment, which includes the current employment of acquired enterprises, the planned employment of newly established business enterprises when fully operational, and the planned employment associated with expansions, was 499,700. Current employment of acquired enterprises, a component of total planned employment, was 476,600.
Among major industries in 2016, manufacturing accounted for the largest number of employees at 162,900, followed by retail trade (110,600). By country of UBO, Canada accounted for the largest number of employees at 105,900, followed by the United Kingdom (51,100) and China (49,400). By U.S. state, Florida accounted for the largest number of employees at 66,000, followed by California (60,000), and Texas (57,600).
New Statistics on Planned and Actual Expenditures for Greenfield Investments
With today’s release, BEA is introducing new statistics on planned expenditures for greenfield investments that were reported when the investment was initiated and updated a year later. These statistics can help answer questions about whether greenfield projects are completed and whether there are significant differences between planned and actual costs. The new statistics are presented by industry, country, state, and type of investment and are available on BEA’s web site.

World Report/African Storm now Depression 1/Solar/Cern Updates

Published on Jul 10, 2017

Views: 17,156

Coldest day on record for July/Northern Hemisphere/Greenland Ice Sheet Growing setting up a mini-ice age, Solar Flares Cause Radio Blackout, All Links @ http://www.BPEarthWatch.Com