3.1 Hardware Trojan Programs in Telecommunication Systems
213
3.1.3 Firewalls
Hardware firewalls [A.I. Beloyc, B.A. Colodyxa, C.B. Xvedov. Ocnovy
konctpyipovanii vycokockopoctnyx lektponnyx yctpoctv. Kpatkii
kypc « Belo magii » . — M.: Texnocfepa, 2017] are special computers installed
between internal network of a company or an Internet provider and the remaining
part of the Internet or between different segments. They are designed to prevent
hacking, DoS attacks, and spam. They provide access to employee terminals that
log into the company’s network via virtual private network (VPN). NSA ANT has
designed hardware and software Trojans for hardware firewalls of the main manufacturers (Cisco, Juniper, and Huawei), which turn these products (initially designed for
creation of digital protective barriers) into gates supporting attacks of NSA hackers.
Most Trojans are installed in BIOS. It guarantees that the Trojan will remain active,
and that malware will be able to use it successfully, even if a computer is rebooted,
or its operating system is updated.
Juniper firewalls
Firewalls Juniper SSG, Netscreen G5, Netscreen 25 and 50, and SSG Series
are designed for small and medium companies, as well as for branches of large
corporations.
The Trojan known as GOURMETTROUGH is a configurable implant for Juniper
devices. It ensures complete control over the router, using hidden channels of data
transmission. It is preserved after rebooting or upgrading operating system of the
router.
Firewalls Juniper SSG300 and SSG500
These are hardware firewalls designed for small and medium companies and branches
of large corporations.
SOUFFLETROUGH Trojan ensures complete control over the firewall. It is
preserved after OS rebooting and upgrading. It can be installed remotely if another
NSA Trojan (BANANAGLEE) was installed on the firewall earlier.
Firewalls Juniper Netscreen/ISG 1000 are hardware firewalls that can be used by
Internet providers and mobile communication operators.
The implant FEEDTROUGH provides remote access to models N5XT, NS25,
NS50, NS200, NS500, and ISG1000.
Cisco firewalls
The most popular are firewalls Cisco PIX-Series and Cisco ASA-Series. PIX series
products by Cisco (USA) are hardware firewalls designed for small, medium, and
large service providers (depending on the model). Production of this range ended in
2008.
The Trojan JETPLOW gives full access to the firewall and traffic, preserved after
rebooting. Advance installation of another NSA Trojan (BANANAGLEE) ensures
213
3.1.3 Firewalls
Hardware firewalls [A.I. Beloyc, B.A. Colodyxa, C.B. Xvedov. Ocnovy
konctpyipovanii vycokockopoctnyx lektponnyx yctpoctv. Kpatkii
kypc « Belo magii » . — M.: Texnocfepa, 2017] are special computers installed
between internal network of a company or an Internet provider and the remaining
part of the Internet or between different segments. They are designed to prevent
hacking, DoS attacks, and spam. They provide access to employee terminals that
log into the company’s network via virtual private network (VPN). NSA ANT has
designed hardware and software Trojans for hardware firewalls of the main manufacturers (Cisco, Juniper, and Huawei), which turn these products (initially designed for
creation of digital protective barriers) into gates supporting attacks of NSA hackers.
Most Trojans are installed in BIOS. It guarantees that the Trojan will remain active,
and that malware will be able to use it successfully, even if a computer is rebooted,
or its operating system is updated.
Juniper firewalls
Firewalls Juniper SSG, Netscreen G5, Netscreen 25 and 50, and SSG Series
are designed for small and medium companies, as well as for branches of large
corporations.
The Trojan known as GOURMETTROUGH is a configurable implant for Juniper
devices. It ensures complete control over the router, using hidden channels of data
transmission. It is preserved after rebooting or upgrading operating system of the
router.
Firewalls Juniper SSG300 and SSG500
These are hardware firewalls designed for small and medium companies and branches
of large corporations.
SOUFFLETROUGH Trojan ensures complete control over the firewall. It is
preserved after OS rebooting and upgrading. It can be installed remotely if another
NSA Trojan (BANANAGLEE) was installed on the firewall earlier.
Firewalls Juniper Netscreen/ISG 1000 are hardware firewalls that can be used by
Internet providers and mobile communication operators.
The implant FEEDTROUGH provides remote access to models N5XT, NS25,
NS50, NS200, NS500, and ISG1000.
Cisco firewalls
The most popular are firewalls Cisco PIX-Series and Cisco ASA-Series. PIX series
products by Cisco (USA) are hardware firewalls designed for small, medium, and
large service providers (depending on the model). Production of this range ended in
2008.
The Trojan JETPLOW gives full access to the firewall and traffic, preserved after
rebooting. Advance installation of another NSA Trojan (BANANAGLEE) ensures