imported>Anon0 am 17. September 2014 um 12:36 Uhr

2014-09-17T12:36:19Z

Neue Seite

Database SQL dump from FinFishers support website

Background
* [https://twitter.com/GammaGroupPR on Twitter]
* [https://netzpolitik.org/2014/gamma-finfisher-gehackt-werbe-videos-von-exploits-und-quelltext-von-finfly-web-veroeffentlicht/ on netzpolitik.org]
* more sources and chronology (mostly German) in our wiki: [[0zapftis#Chronologie|0zapftis]]

Content
* [[FinFisher/Produkte|products]]

*[[FinFisher/database1|database.sql - part 1]]
*[[FinFisher/database2|database.sql - part 2]]

== Customers ==
Sorted by customer UID from the table [[FinFisher/database1#table_customer_license|customer_license]]. Includes customers that have received a gpg-encrypted product file and/or customers that have been identified by their gpg-key, or that have identified themselves as per the [[FinFisher/database2#table_feedback|feedback]] or [[FinFisher/database2#table_support_request|support tables]].

Courtesy of [https://twitter.com/GammaGroupPR @GammaGroupPR]: http://pastebin.com/kZQ5J0js

=== 0DF6972B ===
Khalid from Pakistan

* [[FinFisher/0DF6972B#Licenses|licenses]]

* [[FinFisher/0DF6972B#Support-Requests|support requests]]

=== 6B9EDD58 ===
Arefin from Bangladesh

* [[FinFisher/6B9EDD58#Licenses|licenses]]

* [[FinFisher/6B9EDD58#Support-Requests|support requests]]

=== 7F425F82 ===
Sanjin Custovic, Intelligence-Security Agency (OSA/OBA) of Bosnia and Herzegovina

* [[FinFisher/7F425F82#Licenses|licenses]]

* [[FinFisher/7F425F82#Feedback|feedback]]

=== 0012A3F0 ===
Peter Balogh and Zoltan ... , SSNS - NBSZ hungary secret service

* [[FinFisher/0012A3F0#Licenses|licenses]]

* [[FinFisher/0012A3F0#Support-Requests|support requests]]

* [[FinFisher/0012A3F0#Feedback|feedback]]

=== 14ED6D84 ===
Estonia, [[FinFisher/14ED6D84#0B209014|probably police]]

* [[FinFisher/14ED6D84#Licenses|licenses]]

* [[FinFisher/14ED6D84#Support-Requests|support requests]]

=== 20FEC907 ===
Jochen van der Wal, engineer at KLPD (Korps landelijke politiediensten), identified by PGP-Key that encrypted the product download.

* [[FinFisher/20FEC907#Licenses|licenses]]

* [[FinFisher/20FEC907#Support-Requests|support requests]]

=== 22F984B0 ===

* [[FinFisher/22F984B0#Licenses|licenses]]

=== 43A301F9 ===

* [[FinFisher/43A301F9#Licenses|licenses]]

=== 70CD6D97 ===
Wim Bordeyne, private email: wim.bordeyne@telenet.be, gives work e-mail of h.isrd@skynet.be; names Pierre and Lucian mentioned

* [[FinFisher/70CD6D97#Licenses|licenses]]

* [[FinFisher/70CD6D97#Support-Requests|support requests]]

=== 88F3D306 ===
Cliff Harris (identified through metadata in word document)

* [[FinFisher/88F3D306#Licenses|licenses]]

* [[FinFisher/88F3D306#Support-Requests|support requests]]

=== 89EC5BB5 ===

* [[FinFisher/89EC5BB5#Licenses|licenses]]

* [[FinFisher/89EC5BB5#Support-Requests|support requests]]

=== 0988BAEB ===
Hiwunet (name given in feedback table)

* [[FinFisher/0988BAEB#Licenses|licenses]]

* [[FinFisher/0988BAEB#Support-Requests|support requests]]

* [[FinFisher/0988BAEB#Feedback|feedback]]

=== 4599A7D0 ===
Nasser Alnuaimi, Qatar state security bureau

* [[FinFisher/4599A7D0#Licenses|licenses]]

* [[FinFisher/4599A7D0#Support-Requests|support requests]]

* [[FinFisher/4599A7D0#Feedback|feedback]]

=== 7678CCD6 ===

* [[FinFisher/7678CCD6#Licenses|licenses]]

* [[FinFisher/7678CCD6#Feedback|feedback]]

=== 49378CEF ===

* [[FinFisher/49378CEF#Licenses|licenses]]

* [[FinFisher/49378CEF#Support-Requests|support requests]]

=== 82990EA6 ===

* [[FinFisher/82990EA6#Licenses|licenses]]

* [[FinFisher/82990EA6#Support-Requests|support requests]]

=== 559458B5 ===
Mongolia, and their email odmagnai@gmail.com appears in this whois record:
http://wq.apnic.net/apnic-bin/whois.pl?searchtext=MAINT-MN-NITSYSTEM&form_type=advanced
mail.mn is referenced, email addresses given: Future Mongolia info@future-mongolia.com, altan_edu@yahoo.com, nkhzrg@yahoo.com

* [[FinFisher/559458B5#Licenses|licenses]]

* [[FinFisher/559458B5#Feedback|feedback]]

=== 613780C4 ===

* [[FinFisher/613780C4#Licenses|licenses]]

* [[FinFisher/613780C4#Feedback|feedback]]

=== 76026992 ===

* [[FinFisher/76026992#Licenses|licenses]]

* [[FinFisher/76026992#Feedback|feedback]]

=== B206FF8C ===
PCS Security Pte Ltd (metadata in a word document attached to a support request), Singapore.

* [[FinFisher/B206FF8C#Licenses|licenses]]

* [[FinFisher/B206FF8C#Support-Requests|support requests]]

=== B58616D2 ===
USB on Fire <usbonfire@gmail.com>, PGP-Key on keyserver

* [[FinFisher/B58616D2#Licenses|licenses]]

=== BEC8B100 ===
Vietnam

* [[FinFisher/BEC8B100#Licenses|licenses]]

* [[FinFisher/BEC8B100#Support-Requests|support requests]]

* [[FinFisher/BEC8B100#Feedback|feedback]]

=== C1D31255 ===

* [[FinFisher/C1D31255#Licenses|licenses]]

=== CAFA6A1F ===
campo@campinator.com, PGP-Key on keyserver

* [[FinFisher/CAFA6A1F#Licenses|licenses]]

* [[FinFisher/CAFA6A1F#Support-Requests|support requests]]

=== CC57BE53 ===
"In our location, Avast free Antivirus is one of the top used Antivirus solution if not no. 1. So we are not happy about that." also mentions taiwan-produced ALFA wifi cards
also posted a pic (AA970B9C.png) in feedback with slovak W7+avast
* [[FinFisher/CC57BE53#Licenses|licenses]]

* [[FinFisher/CC57BE53#Support-Requests|support requests]]

=== D5D58215 ===

* [[FinFisher/D5D58215#Licenses|licenses]]

=== DDCD64A2 ===
the Bahraini group, in support requests they ask for help setting up a
website targetting activists in 14 Feb, and in another support request they
attach their C&C server logs. The names of people with admin access to the
FinSpy server are in the server logs, grep for "user name:"
Abdulla Husain, Ahmad, Abdulla Al Eid, Yousif Al Sadiq, Rizwan Saleem, Sayed
Ansar Husain, Humayun, and Mohammed Al Majed

* [[FinFisher/DDCD64A2#Licenses|licenses]]

* [[FinFisher/DDCD64A2#Support-Requests|support requests]]

=== E0AD6E22 ===
Rostislav Psota

* [[FinFisher/E0AD6E22#Licenses|licenses]]

* [[FinFisher/E0AD6E22#Support-Requests|support requests]]

=== E5C0C644 ===

* [[FinFisher/E5C0C644#Licenses|licenses]]

* [[FinFisher/E5C0C644#Support-Requests|support requests]]

=== E7549C72 ===
a folder in a screenshot within a word document attached to a support request is named "Sanyang new" (Sanyang being a company in Taiwan and a village in the Gambia), a text file is called "france"; the email address used for correspondence is cyberiakicksass@gmail.com; the computer used is a laptop, with a time difference of two hours between laptop clock (10h) and MS Word (08h); customer is not an English native speaker ("licence")

* [[FinFisher/E7549C72#Licenses|licenses]]

* [[FinFisher/E7549C72#Support-Requests|support requests]]

* [[FinFisher/E7549C72#Feedback|feedback]]

=== F9660CE4 ===
Nigeria

* [[FinFisher/F9660CE4#Licenses|licenses]]

* [[FinFisher/F9660CE4#Support-Requests|support requests]]

=== F378934F ===
First name "Nazar" is given, mail.ru is mentioned

* [[FinFisher/F378934F#Licenses|licenses]]

* [[FinFisher/F378934F#Support-Requests|support requests]]

* [[FinFisher/F378934F#Feedback|feedback]]

=== Cobham1 ===
probably Cobham Surveillance GmbH, 91126 Schwabach, Germany, http://buggedplanet.info/index.php?title=COBHAM . Has an account but no licenses, feedback or support requests.
Involved is a character called Holger Buge, could be the Holger mentioned in [[FinFisher/14ED6D84#0B209014|this Estonian]], [[FinFisher/CAFA6A1F#412E0BAE|this]] and [[FinFisher/DDCD64A2#677A9C84|this Bahraini]] ticket.

=== Dyplex1 ===
probably Dyplex Communications Ltd., Toronto, Ontario, Canada. Has an account but no licenses, feedback or support requests.

=== Elaman1 ===
Elaman GmbH Germany Security Solutions, Baierbrunner Str. 15, 81379 Munich: http://buggedplanet.info/index.php?title=ELAMAN (same addres as Gamma International http://buggedplanet.info/index.php?title=GAMMA#Gamma_International_GmbH_.28DE.29 )

Involved is a character called Holger Günther Rumscheidt, could be the Holger mentioned in [[FinFisher/14ED6D84#0B209014|this Estonian]], [[FinFisher/CAFA6A1F#412E0BAE|this]] and [[FinFisher/DDCD64A2#677A9C84|this Bahraini]] ticket.

=== Trovicor1 ===
trovicor GmbH, Machtlfinger str 7, 81379 Munich, Germany. According to: http://buggedplanet.info/index.php?title=TROVICOR "Trovicor was originally the "Intelligence Solutions" branch of SIEMENS Voice and Data Recording (VDR)". Has an account with FinFisher but no licenses, feedback or support requests.

[[Kategorie:FinFisher]]
[[Kategorie:Überwachung]]
[[Kategorie:Netzpolitik]]
[[Kategorie:Trojaner]]
[[Kategorie:Privatsphäre und Datenschutz]]
[[Kategorie:0zapftis]]

FinFisher - Versionsgeschichte

imported>Anon0 am 17. September 2014 um 12:36 Uhr