이탈리아 '해킹팀' 전자우편 타임라인

Thank you for your interest in our company and solution.

Hello, I'm writing to inform you that the department name of our customer is "5163 Army Division".

as I mentioned on the phone the order came from the South Korea. The package should start tonight ...
워드파일(5163 South Korea Army.docx):
Targets 10
RCS Training Yes

- The 5163 Army Division Seocho... Seocho-dong, Seocho-gu, Seoul, Korea

We would need a car of support for this new customer: RCS- SKA

User: RCS-SKA
Ticket Subject:
Ticket ID: 2
Ticket Status: new

forwarding the bugs found from SKA to...
they were working on, as Daniel and 'committed Uff

We created a temporary license with 10 additional targets for our client in South Korea. We need to make that license permanent.

SKA asks us if we can provide a list of Android phones that support the recording of the call

I suggest the following training agenda for SKA, subject to changes depending on their needs.

Do you have any relevant contacts with Military Intelligence, Counter Terrorism, Narcotics Bureau, Police or other agencies who may be interested in our solution?

Dear all, We have just ended the training with SKA.

On the commercial side of things, the meeting was also very positive, they have asked a quote for additional 30 licenses, TNI, Intelligence and Connectors. The decision to purchase depends on the effectiveness of the android exploit, which I have advised will be released in the near future.

As mentioned in the update, they are looking at getting more license if the exploit is effective.

LINE(3.2.0.76) KaKaoTalk
Please support messages and voice recordings extraction on applications above.

Hi ..., this is the new reply from SKA:
----- Hi. We concluded a contract for renewal. Please verify with your sales representative. Because 30, 31 January is holiday, we want to get new license file today. Kind Regards

No problem ..., I am waiting for an opportunity ti chat with him on Skype about this issue, after that I will close the ticket. Regards, Serge

Hi... I visited SKA 2 days ago and they asked whether our Android agent is able to support devices installed with Samsung Knox.

Hello... We support Knox enabled phones, on some of them we can get the root. We cannot get evidences from applications that actually run in the Knox container. Remote exploit will be ready in a couple of months.

(참고: 캐나다 토론토 대학 사이버 연구팀 '시티즌 랩(Citizen Lab)'은 2014년 2월 이탈리아 ‘해킹팀’이 그동안 한국을 포함 세계 21개국에 스파이웨어를 판매한 의혹이 있다고 발표 https://citizenlab.org/2014/02/mapping-hacking-teams-untraceable-spyware/)
Hi,This week, ... and I travelled to meet with SKA, MOACA and a prospect (Mongolian Police). We discussed about the issues SKA raised in their ticket, mainly on their concerns about the recent exposure especially when the local news are also highlighting the possibility that the government is using RCS to monitor their own citizens. I explained the countermeasures we took to circumvent future fingerprinting, tracing and identification of RCS Anonymizers and Collectors.

They also asked about the progress of Kakao Talk which they mentioned is very commonly used in their country.

They specifically mentioned that they need to use the remote Android exploit during June period and asked about the development progress.

Nanatech Unfortunately they said that due to the article published by Citizen Lab they have seriously been questioned by their Senior Management on the security of not being exposed in the future.

(참고: TNI, Tactical Network Injector는 무선 인터넷을 기반으로 하는 네트워크 감청 장비)
Hi ..., I will be delivering the TNI to SKA and probably conduct a day of training on how to use it.

Hi ..., I visited SKA recently and as part of TNI test, we infected a Samsung S4 with Android 4.2.2 using replace method. The apk is melted with a game. The Samsung S4 is knox enabled. After installing the agent, there is a prompt every 5 seconds saying that knox has encountered error (crashed) and the phone is unusable due to the slowness. Due to network issue, I am unable to check whether there is any callback from the agent.

Hello ..., SKA asked us again 4 other exploits with the same apk, yesterday requested and obtained 3 exploits but at the moment the state is active.

Hello. They were made a little 'additions to core-Android-native for the support to Huawei P series that are required by SKA.

Hello guys, I need your support. SKA asks us a question about the possibility to support different models of Note3,

Hi. Please make 3 URLs for real targets. Destination URL is "http://blog.naver.com/...". Could you make infection URL which will be available for long time?( 2weeks or a month?)

Hello ..., SKA requires an answer "technique" by the developer of the module CALL in person about their problems on Android 5.x. In summary, the question is "how is it that the form of CALL Lollipop does not work, if there are apps that make saving conversations?". As soon as you have time you can kindly take a look at their demands? In summary, unless you want to look all over the thread: - Customer: The module works by Android 4.0 to 4.4, right? Why not work on Galaxy S6 Edge?

Hello ..., I'm sorry if you distrubo, SKA laments the failure of the modules and Photo Screenshoot of this device in particular; but also reports that on other devices encountered the same problem. The other modules are working properly.