Organisation
organisation:national_security_agency
Also: NSA
A United States intelligence agency mentioned as part of the US intelligence community.
US intelligence organisation mentioned in a speculative theory about access to DigiNotar.
“it may be the work of NSA or an exploit of NSA”
A United States intelligence agency mentioned as part of the US intelligence community.
“and the National Security Agency and others”
“NSA: Yeah, I spent almost fifteen years with the US government”
US intelligence agency involved in the government’s cryptography policy and discussions over export controls.
“Bobby Inman who was the head of the NSA in the 90s”
“The State Department had a discussion with the NSA”
US intelligence organization where Ira worked in signals intelligence, cryptanalysis, and related research and development.
“Finally I took a job as an Intelligence Analyst for the National Signals Intelligence Operations Center”
“Here within the walls of the NSA he was learning about computer security.”
U.S. signals-intelligence agency used as the comparison for Unit 8200.
“If you don’t know what NSA is, it’s America’s 8200 Unit.”
US intelligence organisation discussed as a possible contributor to Stuxnet and as lacking visibility into Natanz.
“We think it was probably the NSA who crafted this virus”
“The NSA had no visibility into the facility”
US intelligence agency where David and Lori previously worked and which the episode compares with NISSA.
“he moved over to the NSA”
“NISSA was the secret part of the UAE government which is similar to the NSA”
United States intelligence agency described as having developed Quantum Insert and possibly assisting the Belgacom intrusion.
“a technology that the NSA developed called Quantum Insert”
“it’s possible that the NSA helped the GCHQ conduct these attacks”
US intelligence organization that worked with Cyber Command on ISIS media analysis and operations.
“they had just started a team between NSA and CYBERCOM that was focused solely on ISIS media.”
U.S. intelligence organization discussed as both a discoverer or holder of Windows exploits and a reporter of vulnerabilities to Microsoft.
“the NSA is actively looking for vulnerabilities in Windows”
“this bug was reported to Microsoft by the NSA”
Government intelligence organisation mentioned in connection with stockpiled vulnerabilities and use of Evercookie.
“what the NSA is doing”
“They stockpiled Windows vulnerabilities, zero-days”
U.S. intelligence agency presented in the episode as allegedly supporting covert telecommunications surveillance during the Athens Olympics.
“the NSA started working with the Greek National Intelligence Service”
“they used the CIA agent named William Basil”
United States intelligence agency discussed as a possible but unsupported attribution hypothesis and as Robert Lee’s former employer.
“Rob used to work with the NSA before starting Dragos.”
“would it be the [00:55:00] NSA?”
U.S. intelligence and defense organization discussed as responsible for cryptography, signals intelligence, and protecting classified communications and networks.
“the NSA is the Department of Defense asset”
“NSA ran its own cryptologic school”
U.S. signals-intelligence and cybersecurity organization used as a comparison for Unit 8200.
“sort of like Israeli’s version of the NSA”
US intelligence agency described as developing, acquiring, cataloguing, and operationally using zero-day capabilities.
“the NSA was buying exploits from outside contractors”
US intelligence organisation described as collecting signals intelligence and working with the CIA.
“the NSA collects signals intelligence and the CIA collects human intelligence”
Intelligence organisation mentioned in connection with alleged personal misuse of national surveillance access.
“people in the NSA have used their access to the national surveillance infrastructure”
US intelligence agency described as the developer or discoverer of EternalBlue and later involved in attributing WannaCry.
“We believe it was the NSA that developed the exploit”
“the NSA and GCHQ and I think the Australian intelligence services, they all came out and they pointed the finger at North Korea”
US intelligence organisation presented as the source or subject of the ANT catalog and Cottonmouth hardware.
“the NSA ANT catalog had this catalog of all this cool espionage tooling”
“the NSA’s version of this malicious cable”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | USES | Evercookie | Attributed | 61 |
| outgoing | ASSOCIATED_WITH | Windows zero-days | Explicit | 61 |
| outgoing | ASSOCIATED_WITH | Hellenic National Intelligence Service | Attributed | 64 |
| outgoing | ASSOCIATED_WITH | Vodafone Greece wiretapping affair | Attributed | 64 |
| outgoing | USES | Vodafone Greece wiretapping malware | Attributed | 64 |
| outgoing | PART_OF | Department of Defense | Explicit | 83 |
| outgoing | ASSOCIATED_WITH | NIST | Explicit | 83 |
| outgoing | USES | zero-day exploit | Explicit | 98 |
| outgoing | EXPLOITS | weak random number generator | Explicit | 98 |
| outgoing | USES | LOVEINT | Uncertain | 140 |
| incoming | ATTRIBUTED_TO | DigiNotar breach | Uncertain | 3 |
| incoming | ASSOCIATED_WITH | Nation State Actor | Explicit | 10 |
| incoming | PART_OF | National Signals Intelligence Operations Center | Explicit | 21 |
| incoming | ASSOCIATED_WITH | Unit 8200 | Explicit | 28 |
| incoming | ASSOCIATED_WITH | Stuxnet | Uncertain | 29 |
| incoming | MEMBER_OF | David | Explicit | 47 |
| incoming | MEMBER_OF | Lori Stroud | Explicit | 47 |
| incoming | DEVELOPED_BY | Quantum Insert | Explicit | 48 |
| incoming | ATTRIBUTED_TO | Duqu | Uncertain | 48 |
| incoming | ATTRIBUTED_TO | Flame | Uncertain | 48 |
| incoming | ASSOCIATED_WITH | GCHQ | Attributed | 48 |
| incoming | ASSOCIATED_WITH | United States Cyber Command | Uncertain | 50 |
| incoming | ASSOCIATED_WITH | EternalBlue | Attributed | 57 |
| incoming | DEVELOPED_BY | EternalBlue | Uncertain | 158 |
| incoming | ASSOCIATED_WITH | Marcus J. Carey | Explicit | 83 |
| incoming | MEMBER_OF | Jeff Man | Explicit | 83 |
| incoming | OPERATED_BY | Operation Eligible Receiver | Explicit | 83 |
| incoming | DEVELOPED_BY | SHA-256 | Uncertain | 83 |
| incoming | INVOLVES | Project Gunman | Explicit | 98 |
| incoming | PART_OF | Tailored Access Operations | Explicit | 98 |
| incoming | ASSOCIATED_WITH | Central Intelligence Agency | Explicit | 116 |
| incoming | ASSOCIATED_WITH | ANT catalog | Explicit | 161 |
DigiNotar breach ATTRIBUTED_TO National Security Agency
Bruce Schneier said the incident may have been the work of the NSA or an exploit of the NSA, based mainly on a leaked document showing NSA access to DigiNotar; the episode characterizes this theory as weak.
Uncertain Confidence 78% · Jack Rhysider EP 3 Details
“Bruce Schneier, a prominent security expert says it may be the work of NSA or an exploit of NSA”
“This theory isn’t very strong and has almost no other evidence”
Nation State Actor ASSOCIATED_WITH National Security Agency
Nation State Actors are described as hacking groups operating inside government agencies; the NSA is given as an example of a U.S. intelligence agency.
Explicit Confidence 82% · Jack Rhysider EP 10 Details
“the hacking groups that are inside government agencies, otherwise known as Nation State Actors”
“The US has the Central Intelligence Agency and the National Security Agency and others.”
National Signals Intelligence Operations Center PART_OF National Security Agency
The National Signals Intelligence Operations Center is described as being within the NSA.
Explicit Confidence 94% · Ira Winkler EP 21 Details
“which was the only room that actually looks cool in NSA”
Unit 8200 ASSOCIATED_WITH National Security Agency
Netanyahu compares the Israeli Unit 8200 to the United States National Security Agency.
Explicit Confidence 99% · Pm EP 28 Details
“If you don’t know what NSA is, it’s America’s 8200 Unit.”
Stuxnet ASSOCIATED_WITH National Security Agency
The episode says the NSA probably crafted Stuxnet, but presents this as an uncertain assessment rather than a confirmed fact.
Uncertain Confidence 78% · Jack Rhysider EP 29 Details
“We think it was probably the NSA who crafted this virus”
David MEMBER_OF National Security Agency
David worked as an analyst for the NSA from approximately August 2011 to August 2014.
Explicit Confidence 99% · Jack Rhysider EP 47 Details
“He started working for the NSA as an analyst there.”
Lori Stroud MEMBER_OF National Security Agency
Lori worked for the NSA before joining Project Raven.
Explicit Confidence 99% · Jack Rhysider EP 47 Details
“After that, she went on to work for the NSA.”
Quantum Insert DEVELOPED_BY National Security Agency
Quantum Insert is described as a technology developed by the NSA.
Explicit Direction flagged Confidence 98% · Jack Rhysider EP 48 Details
“a technology that the NSA developed called Quantum Insert”
Duqu ATTRIBUTED_TO National Security Agency
Duqu is described as thought to have been created by the NSA, so the attribution is uncertain.
Uncertain Confidence 78% · Jack Rhysider EP 48 Details
“Duqu is thought to be created by the NSA and Unit 8200 in Israel”
Flame ATTRIBUTED_TO National Security Agency
Flame is described as thought to have been created by the NSA and GCHQ, so the attribution is uncertain.
Uncertain Confidence 78% · Jack Rhysider EP 48 Details
“Flame is thought to be created by the NSA and GCHQ.”
GCHQ ASSOCIATED_WITH National Security Agency
Snowden-related reporting described GCHQ as sharing collected data with the NSA; this is presented as an attributed surveillance relationship.
Attributed Confidence 93% · Jack Rhysider EP 48 Details
“sharing this data with the NSA”
United States Cyber Command ASSOCIATED_WITH National Security Agency
Jack says US Cyber Command is believed to have been the offensive team within the NSA and that it originated from the NSA before becoming independent.
Uncertain Confidence 95% · Jack Rhysider EP 50 Details
“US Cyber Command is believed to be the offensive team within the NSA. Actually, it came out of the NSA but now it’s its own thing.”
EternalBlue ASSOCIATED_WITH National Security Agency
EternalBlue is described as an NSA tool; the episode attributes that characterization to John Lambert's account.
Attributed Confidence 94% · John Lambert EP 57 Details
“This is one of these NSA tools”
National Security Agency USES Evercookie
The episode says classified documents indicated that the NSA sometimes used Evercookie to track users through Tor.
Attributed Confidence 94% · Jack Rhysider EP 61 Details
“the NSA sometimes uses Evercookie to track its users through Tor”
National Security Agency ASSOCIATED_WITH Windows zero-days
Samy says the NSA stockpiled Windows vulnerabilities and zero-days; the episode presents this in the context of the NSA leaks.
Explicit Confidence 98% · Samy Kamkar EP 61 Details
“They stockpiled Windows vulnerabilities, zero-days that nobody knew about”
National Security Agency ASSOCIATED_WITH Hellenic National Intelligence Service
According to Snowden documents described by Jack, the NSA worked with the Greek National Intelligence Service before the Olympics.
Attributed Confidence 92% · Jack Rhysider EP 64 Details
“the NSA started working with the Greek National Intelligence Service in the two years running up to the games.”
National Security Agency ASSOCIATED_WITH Vodafone Greece wiretapping affair
James Bamford alleged that the NSA obtained Greek permission to enter the telecom system for Olympic security and later used the operation to monitor Greek officials; this is an attributed, contested account.
Attributed Confidence 88% · James Bamford EP 64 Details
“they got the permission from the Greek government to come in and do the bugging.”
“now they’re secretly turning it on the Greek government; they’re turning it on the prime minister, his wife.”
National Security Agency USES Vodafone Greece wiretapping malware
In James Bamford’s account, the NSA operation involved obtaining malware, placing it in Vodafone, and exfiltrating intercepted communications; the attribution is not officially established in the episode.
Attributed Confidence 84% · James Bamford EP 64 Details
“you’ve got the agreement of the government, you’ve got the inside person, you’ve got the malware”
“then you exfiltrate the intercepting communications to these untraceable cell phones and then that puts it into NSA.”
National Security Agency PART_OF Department of Defense
Marcus states that the NSA is a Department of Defense asset.
Explicit Confidence 99% · Marcus J. Carey EP 83 Details
“NSA is the Department of Defense asset.”
Marcus J. Carey ASSOCIATED_WITH National Security Agency
Marcus describes himself as a Navy intelligence asset tasked by the NSA and later working at Fort Meade on augmented staff.
Explicit Confidence 98% · Marcus J. Carey EP 83 Details
“my whole job in the military was you’re pretty much an attache or an asset for NSA”
“I was still in the Navy and sort of on loan to the NSA.”
National Security Agency ASSOCIATED_WITH NIST
Marcus says that NSA and NIST work hand-in-hand on security guidance for American businesses.
Explicit Confidence 98% · Marcus J. Carey EP 83 Details
“NSA and NIST, they work hand-in-hand to try to help all American businesses stay secure as well.”
Jeff Man MEMBER_OF National Security Agency
Jeff says he began working at the NSA in the fall of 1986 and spent about twelve years there.
Explicit Confidence 99% · Jack Rhysider EP 83 Details
“Jeff started working at the NSA in the fall of 1986.”
“Jeff was with the NSA for twelve years”
Operation Eligible Receiver OPERATED_BY National Security Agency
Jack says the NSA launched Operation Eligible Receiver as a no-notice training attack against US government and military networks.
Explicit Confidence 99% · Jack Rhysider EP 83 Details
“in 1997, the NSA launched Operation Eligible Receiver.”
SHA-256 DEVELOPED_BY National Security Agency
Jack states that SHA-256 was made by the NSA; Jeff does not confirm the claim and says he would not disclose the answer if he knew it.
Uncertain Confidence 65% · Jack Rhysider EP 83 Details
“SHA-256 was made by the NSA.”
“I don’t know how you would do that with a hashing algorithm.”
Project Gunman INVOLVES National Security Agency
Project Gunman was an investigation kicked off by the NSA into suspected Soviet surveillance of US embassy communications.
Explicit Confidence 98% · Jack Rhysider EP 98 Details
“This investigation was kicked off by the NSA and was code-named the Gunman Project.”
Tailored Access Operations PART_OF National Security Agency
Tailored Access Operations is described as the NSA's hacking unit.
Explicit Confidence 99% · Nicole Perlroth EP 98 Details
“the top hackers within Tailored Access Operations, the NSA’s hacking unit”
National Security Agency USES zero-day exploit
The NSA later added budget to buy exploit capabilities from outside sources and is said to have purchased vulnerabilities externally.
Explicit Confidence 96% · Nicole Perlroth EP 98 Details
“there was a line item added to their black budget, and it wasn’t very big; it was something like $25.1 million to buy these capabilities in 2013. We know that they have purchased these vulnerabilities from the outside.”
National Security Agency EXPLOITS weak random number generator
The NSA was able to break through a weak random number generator and allegedly pushed that vulnerable system into commercial products.
Explicit Confidence 98% · Nicole Perlroth EP 98 Details
“the NSA knew that there was a – that the NSA could break through this essentially weak random number generator”
Central Intelligence Agency ASSOCIATED_WITH National Security Agency
Jack says the CIA often works closely with the NSA on missions combining human and signals intelligence.
Explicit Confidence 99% · Jack Rhysider EP 116 Details
“the CIA often works closely with the NSA to conduct certain missions”
National Security Agency USES LOVEINT
Jack reports that people in the NSA have allegedly used surveillance access to monitor spouses or romantic interests; this is presented as reported behavior, not an unqualified fact about the whole organization.
Uncertain Confidence 83% · Jack Rhysider EP 140 Details
“There has been some reported cases that people in the NSA have used their access to the national surveillance infrastructure to check if a spouse is cheating”
EternalBlue DEVELOPED_BY National Security Agency
Jack says it was believed that the NSA developed the EternalBlue exploit.
Uncertain Confidence 84% · Jack Rhysider EP 158 Details
“We believe it was the NSA that developed the exploit, which they called EternalBlue.”
ANT catalog ASSOCIATED_WITH National Security Agency
Jack describes the ANT catalog as leaked NSA documents; MG discusses it as the NSA ANT catalog.
Explicit Confidence 99% · Jack Rhysider EP 161 Details
“This was some leaked NSA documents which showed different types of devices and technology”