On the 7th March 2017, Wikileaks published the first in the series of the “Vault 7” leaks, “Year Zero“. “Year Zero” represents the largest and most comprehensive release of US spying files. The leak totals 8,761 documents, which cover “the entire hacking capacity of the CIA.”
According to Wikileaks co-founder, Julian Assange, Wikileaks has guaranteed that the CIA has now “lost control of its arsenal“. This arsenal includes malware, viruses, trojans, weaponized “zero day” exploits, malware remote control systems and associated documentation. Wikileaks claims this accounts for more than 700,000,000 lines of code.
The “Year Zero” leak is intended to introduce the public to “the scope and direction of the CIA’s global covert hacking program“. “Year Zero” reveals how malware and “zero day” weaponized exploited both US and European companies and products. This includes, but is not limited to, “Apple’s iPhone, Google’s Android and Microsoft’s Windows and even Samsung TVs, which are turned into covert microphones“.
With over “5000 registered users” the Center for Cyber Intelligence (CCI), the hacking division for the CIA, has produced “more than a thousand hacking systems, trojans, viruses, and other ‘weaponized’ malware.” By 2016 CCI hackers had produced more code that “used to fun Facebook“.
Assange warned in a statement that “there is an extreme proliferation risk in the development of cyber ‘weapons’“.
Within the “Year Zero” leaks, Wikileaks has highlighted a few crucial revelations. However, Wikileaks have made it explicitly clear that there are “considerably more stories than there are journalists or academics who are in a position to write them“. Similarly, Wikileaks has “intentionally not written up hundreds of impactful stories” instead preferring others to find and write the stories.
However, Wikileaks highlights three crucial stories from the “Year Zero” leak.
- CIA malware which is targeting iPhone, Android and Smart TVs
- CIA malware targeting Windows, OSx, Linux, routers
- CIA hoarding of vulnerabilities (“Zero days”)