In a case that smacks of a Cold War spy novel, the FBI has arrested 11 suspected Russian spies who for years had blended into day-to-day American life in the suburbs and cities. Aside from hiding their true identities and posing as legitimate American citizens, the suspects also masked their communications with their intelligence agency back home in Moscow, using an oft-forgotten form of stealth communication -- steganography.. According to U.S. Department of Justice legal filings, the defendants used a steganography tool, one that is not available commercially, to conceal their electronic communiques with Russian officials in the so-called SVR, a Russian Federation foreign intelligence body. Steganography hides text or images within image files or other innocuous-looking files. The alleged spies used steganography to hide messages within digital images on websites: "The software package permits the SVR clandestinely to insert encrypted data into images that are located on publicly-available websites without the data being visible," according to one of the DoJ's legal filings. "The encrypted data can be removed from the image, and then decrypted, using SVR-provided software. Similarly, SVR-provided software can be used to encrypt data, and then clandestinely to embed the data in images on publicly-available websites." FBI agents discovered the steganography software during their forensics investigations of computer disks they recovered in the Boston, Seattle, and New Jersey residences where some of the suspects lived, according to the legal filings (PDF), which detail how the suspects assimilated themselves in the U.S. in order to glean U.S. secrets, including nuclear weapons research, for Moscow. The link for this article located at Dark Reading is no longer available. . Recent court documents reveal that agents from Russia have utilized advanced cryptographic techniques to hide their messages, effectively dodging surveillance.. Steganography, Covert Communication, Foreign Intelligence, ElectronicEspionage. . LinuxSecurity.com Team
Over the past couple of years, steganography has been the source of a lot of discussion, particularly as it was suspected that terrorists connected with the September 11 attacks might have used it for covert communications. While no such connection has . . . . Over the past couple of years, steganography has been the source of a lot of discussion, particularly as it was suspected that terrorists connected with the September 11 attacks might have used it for covert communications. While no such connection has been proven, the concern points out the effectiveness of steganography as a means of obscuring data. Indeed, along with encryption, steganography is one of the fundamental ways by which data can be kept confidential. This article will offer a brief introductory discussion of steganography: what it is, how it can be used, and the true implications it can have on information security. While we are discussing it in terms of computer security, steganography is really nothing new, as it has been around since the times of ancient Rome. For example, in ancient Rome and Greece, text was traditionally written on wax that was poured on top of stone tablets. If the sender of the information wanted to obscure the message - for purposes of military intelligence, for instance - they would use steganography: the wax would be scraped off and the message would be inscribed or written directly on the tablet, wax would then be poured on top of the message, thereby obscuring not just its meaning but its very existence[1]. According to Dictionary.com, steganography (also known as "steg" or "stego") is "the art of writing in cipher, or in characters, which are not intelligible except to persons who have the key; cryptography" [2]. In computer terms, steganography has evolved into the practice of hiding a message within a larger one in such a way that others cannot discern the presence or contents of the hidden message[3]. In contemporary terms, steganography has evolved into a digital strategy of hiding a file in some form ofmultimedia, such as an image, an audio file (like a .wav or mp3) or even a video file. The link for this article located at SecurityFocus is no longer available. . Over the past couple of years, steganography has been the source of a lot of discussion, particularl. couple, years, steganography, source, discussion, particularl. . LinuxSecurity.com Team
The al-Qaeda terror network has begun using hackers who break into websites to create secret pages that send messages to its followers, Internet specialists say. An example of this practice came earlier this month when a message purportedly from al-Qaeda chief . . . . The al-Qaeda terror network has begun using hackers who break into websites to create secret pages that send messages to its followers, Internet specialists say. An example of this practice came earlier this month when a message purportedly from al-Qaeda chief Osama bin Laden appeared on cenobite.com, a website started by a fan of science fiction writer Clive Barker. Andrew Weisburd, an online activist who tracks terrorist groups, said he believes al-Qaeda began using this technique to communicate after the rights expired to alneda.com, a website often linked to al-Qaeda. What is unusual, say security specialists, is that the operators of the innocent websites are often unaware of the intrusion until well after the fact, because the data is place on a hidden file that can only be accessed with the correct code. The link for this article located at iafrica.com is no longer available. . ISIS is utilizing cyber operatives to breach online platforms and establish hidden sections for interacting with adherents.. Al-Qaeda Hacking, Cyber Threats, Covert Messaging, Online Security. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.