NEBULA: NSA Exploit of the Day
Today’s item from the NSA’s Tailored Access Operations (TAO) group implant catalog:
NEBULA
(S//SI//FVEY) Multi-Protocol macro-class Network-In-a-Box (NIB) system. Leverages the existing Typhon GUI and supports GSM, UMTS, CDMA2000 applications. LTE capability currently under development.
(S//SI//REL) Operational Restrictions exist for equipment deployment.
(S//SI//REL) Features:
- Dual Carrier System
- EGSM 900MHz
- UMTS 2100MHz
- CDMA2000 1900MHz
- Macro-class Base station
- 32+Km Range
- Optional Battery Kits
- Highly Mobile and Deployable
- Integrated GPS, MS, & 802.11
- Voice & High-speed Data
(S//SI//REL) Advanced Features:
- GPS—Supporting NEBULA applications
- Designed to be self-configuring with security and encryption features
- 802.11—Supports high speed wireless LAN remote command and control
(S//SI//REL) Enclosure:
- 8.5″H x 13.0″W x 16.5″D
- Approximately 45 lbs
- Actively cooled for extreme environments
(S//SI//REL) NEBULA System Kit:
- NEBULA System
- 3 Interchangeable RF bands
- AC/DC power converter
- Antenna to support MS, GPS, WIFI, & RF
- LAN, RF, & USB cables
- Pelican Case
- (Field Kit only) Control Laptop and Accessories
(S//SI//REL) Separately Priced Options:
- 1500 WH LiIon Battery Kit
(S//SI//REL) Base Station Router Platform:
- Multiple BSR units can be interconnected to form a macro network using 802.3 and 802.11 back-haul.
- Future GPRS and HSDPA data service and associated application
Status:
Unit Cost: $250K
Page, with graphics, is here. General information about TAO and the catalog is here.
In the comments, feel free to discuss how the exploit works, how we might detect it, how it has probably been improved since the catalog entry in 2008, and so on.
Karl Hall • February 28, 2014 3:07 PM
Has Snowden ever indicated why he blew the cover on TAO? Like Bruce indicated previously, these TAO devices/apps seem to be in service of the most defensible work the NSA does.