WikiLeaks Dump Reveals CIA Tool for MitM Attacks

WikiLeaks dumped today the documentation of a new supposed CIA hacking tool called Archimedes, whoch the Agency had used to perform Man-in-the-Middle attacks on local networks.According to the nine leaked documents, this tool was previously named Fulcrum but was renamed to Archimedes when it reached v1.Timestamps in the documents reveal the tool was developed and most likely used between 2011 and 2014.The Archimedes manual describes the tool’s purpose as follows.Archimedes is used to redirect LAN traffic from a target’s computer through an attacker controlled computer before it is passed to the gateway. This enables the tool to inject a forged web server response that will redirect the target’s web browser to an arbitrary location. This technique is typically used to redirect the target to an exploitation server while providing the appearance of a normal browsing session.As you can see, the tool does not execute the MitM attack itself, but only redirects the target’s traffic to another PC on the same network. That second machine will be responsible for breaking down connections, reading the user’s traffic, and then relaying the traffic to the LAN’s gateway server.

Källa: WikiLeaks Dump Reveals CIA Tool for MitM Attacks