FinFisher US Spyware servers in SA: more details emerge:
--------------
Summary: IP ADDRESSES:
"When Citizen Lab released its report towards the end of April 2013, it revealed that FinFisher C&C servers were being hosted on the Telkom network in South Africa.Provided with the IP addresses of the servers by Citizen Lab (which both started with 41.241), a Telkom spokesperson told MyBroadband that the addresses fell within Telkom’s pool of dynamically allocated addresses.
“These IP addresses are randomly assigned when ADSL users initiate an Internet session,” Telkom said. “The ADSL customers need not be direct customers of Telkom either; they could be accessing the internet via ADSL services acquired through other licensed operators that retail ADSL.”As FinFisher is typically sold to governments, we previously reached out to agencies that would be likely customers of the product.The South African Police Service (SAPS) directed our queries to the State Security Agency (SSA), who in turn pointed us to the Department of Communications (DoC). SSA said that it is the agency’s policy to neither confirm nor deny anything that might reveal information about its capabilities.According to the SSA, questions pertaining to FinFisher are best addressed by the DoC, though the spokesperson for the agency explained that it would not procure such information gathering software through the DoC.Asked about the discovery of FinFisher C&C servers in South Africa, the spokesperson for DoC told MyBroadband that it "did not buy the spyware suite".
http://mybroadband.co.za/news/security/86437-spyware-servers-in-sa-more-details-emerge.html
↧