The Shadow Brokers Are Back !

After the Shadow Brokers group opened up its archive of exploits allegedly stolen from the United States National Security Agency, security experts found a nasty surprise waiting for Solaris administrators.
shadow brokers

"The NSA exploits are works of art, robust, reliable, anti-forensics, network IDS evasion techniques, static binaries for run-time. Beautiful," Hickey posted on Twitter. The Shadow Brokers group released more alleged hacking tools and exploits that, the group claims, belonged to "Equation Group" – an elite cyber attack unit linked to the NSA . They have the power to hack any Oracle Solaris box in the world via UDP/TCP generically with anti-forensics capabilities and its public..

A security researcher, who uses Twitter handle x0rz, has uploaded all files after decryption on Github and the passphrase is: CrDj"(;Va.*NdlnzB9M?@K2)#>deB7mN as disclosed by the ShadowBrokers on medium.com. The tools would let attackers remotely take over most secured systems around the world

The existence of tools that can remotely control Solaris machines is highly worrying because very few administrators are proactively monitoring their Solaris clusters for attack, and also because of the sensitive type of information typically handled by these systems. These binaries can target any Solaris system in the world and give attackers a presence on mission-critical systems for some of the world's largest companies.

#exploits #shadowbrokers #equationgroup #hacking #NSA #tao