FBI Cybert efforts

FBI Cybert efforts

"computer and internet protocol address verifier," or CIPAV, is designed to infiltrate a target’s computer and gather a wide range of information, which it secretly sends to an FBI server in eastern Virginia. The FBI’s use of the spyware surfaced in 2007 when the bureau used it to track e-mailed bomb threats against a Washington state high school to a 15-year-old student.

...CIPAV’s capabilities, but an FBI affidavit in the 2007 case indicate it gathers and reports a computer’s IP address; MAC address; open ports; a list of running programs; the operating system type, version and serial number; preferred internet browser and version; the computer’s registered owner and registered company name; the current logged-in user name and the last-visited URL.

After sending the information to the FBI, the CIPAV settles into a silent "pen register" mode, in which it lurks on the target computer and monitors its internet use, logging the IP address of every server to which the machine connects.

In a separate February 2007, Cincinnati-based investigation of hackers who’d successfully targeted an unnamed bank, the documents indicate the FBI’s efforts may have been detected. An FBI agent became alarmed when the hacker he was chasing didn’t get infected with the spyware after visiting the CIPAV-loaded website. Instead, the hacker "proceeded to visit the site 29 more times," according to a summary of the incident. "In these instances, the CIPAV did not deliver its payload because of system incompatibility."

SOURCE:

FBI Cyber Action Teams, or CATs, are small, highly-trained teams of FBI agents, analysts, and computer forensics and malicious code experts who travel the world on a moment’s notice to respond to fast-moving cyber threats. Read howteams sent to Morocco and Turkey helped catch the authors of the malicious "Zotob" code.

The FBI seems to have tne ability to track and trace perps or suspects on the Internet and can

penetrate some computer systems and collect data.

Their CIPAV is simmilar to our "Bot Surveillance Units" in the data collected,

but from the info released the CIPAV operate using defferent methods and 

actually hack the perps computer. 

We have tracked Backdoors from terrorist PCs

to the USA, We ended the surveillance when we

were sure it was an Intelligence gathering operatioon.

The FBI's CAT teams are on 24 hour call and located 

in the North West. We have worked with them

several times, fulfilling requests and reporting

Intel. Contrary to their PR Hype they are NOT

easy to work with.

They had asked for the Technical details of

our "Bot Surveillance Units", which we declined.

We were asked for a powerpoint about our capabilities,

We responded with a PP about the Actionable 

Intellegence we have reported to Intelligence Agencys

and operations we have run against the terrorists.

I was told there were "NO complaints" about the

Intel we have reported, "No complaints  at all"...

We have contacts at the FBI, NSA, CIA DIA, DHS, Socom

and a hand full of other alphebet soup names.

The CAT teams seem to be underfunded,

And still rely on Physical surveillance

instead of Cyber surveillance. Thats to be expected

based on the FBI's history.

And the CAT teams are run by some of  the

best minds at the FBI. They are still expanding

the concept and developing their paradigm.

Paradigm Intel says :

The young Turks know they have been given  Ferrari's

But the old men won't let them take it out of FIRST gear.

Gerald

Tactical Internet Systems analyst.

.