-
Info
UIU File 2017-102: WHISPER IN THE WIND
Authors:
pxdnbluesoul and
aismallard
For Collab-Con 2019:
Unusual Incidents Unit & Pentagram.
- Initial Report
- Description and Capabilities
- Bureau Record
- Incoming Communications
- Outgoing Communications
Electronic copy below as per Federal Records Act
UIU File 2017-102: WHISPER IN THE WIND
Attachments:
1. Description and Capabilities
2. Bureau Record
3. Incoming Communications
4. Outgoing Communications
Classified By: John Powers, UIU(C3I)
Reason: 1.5 (c) and (e)
Declassify On: X1
Unclassified when separated from classified enclosures
TOP SECRET
Name: Codename WHISPER IN THE WIND
Irregularity Cross-reference: Electronic, Thaumaturgic, Ontological, Surveillance, Software
Capabilities: WHISPER IN THE WIND is currently capable of high- and low-level C2,1 including remote access to all peripherals onboard (including but not limited to serial communication, cameras, microphones, and human interface devices), screen recording, keylogging, arbitrary code execution, parallelized completion of tasks on remote computing devices, and advanced persistence across air-gapped and networked devices.
Purpose/Motive: The WHISPER IN THE WIND project was proposed, in conjunction with Pentagram,2 to gain and retain access to systems as deemed necessary by the United States for the purposes of intercepting and obstructing terrorism, distribution of child pornography, and unlawful entry into the United States.
Modus Operandi: Access to systems is provided and maintained by the WHISTLE protocol, continuously delivering the WHISTLE payload (WHISPER) across the globe in 45 different instruction set architectures using thaumically-enhanced ground-penetrating radar. Once WHISTLE has delivered the payload, the WHISPER suite will verify all devices on the local area network have received the payload, and will then call home and be available to receive instructions.
Behavior: WHISPER is a thaumically-augmented rootkit developed in conjunction with Pentagram (See Pentagram Documentation, "CARELESS WHISPER" Ontological C2 Suite). Once delivered to a host, WHISPER is capable of inspecting, modifying, and emptying the host's counters and registers at will. WHISPER is capable of intelligently analyzing and negating efforts to detect or access itself by manipulating the ontological validity of registers on-the-fly, replacing their values with those that are beneficial to the continued existence and operation of WHISPER.
Results: Currently, WHISPER IN THE WIND has been credited with stopping or affecting over ███ cases of terrorism; child pornography; human trafficking; illegal entry into the United States; or drug trafficking. WHISPER has been successfully delivered to over ███████████ devices around the world.
TOP SECRET
Current Status: The project has been successful thus far with only minimal extraneous costs and complications, largely ameliorated by UIU's HUMINT activities with related organizations.
Schedule A: HUMINT Pay Schedule
| Date | Contact | Reason | Payout | Funding Source |
|---|---|---|---|---|
| 2001-01-13 | Longbow | Zero-day (UVE-2001-001) | $25,000 | PENTAGRAM |
| 2001-01-15 | Longbow | Zero-day (UVE-2001-002) | $35,000 | PENTAGRAM |
| 2001-08-01 | Ambrosia | Zero-day (UVE-2001-006) | $75,000 | PENTAGRAM |
| 2002-06-23 | Clam Sauce | Zero-day (UVE-2002-001) | $50,000 | PENTAGRAM |
| 2004-11-16 | Longbow | Zero-day (UVE-2004-011) | $250,000 | PENTAGRAM |
| 2005-09-03 | Notre Dame | Zero-day (UVE-2005-003) | $10,000 | PENTAGRAM |
| 2005-12-26 | Prometheus | Code contribution | $10,000,000 | PENTAGRAM |
| 2006-05-20 | Prometheus | Code contribution | $15,000,000 | PENTAGRAM |
| 2006-06-16 | Notre Dame | Confidential informant | $1,000,000 | UIU |
| 2008-01-03 | Longbow | Zero-day (UVE-2008-001) | $500,000 | PENTAGRAM |
| 2011-03-04 | Mamba | Code contribution | $26,000,000 | PENTAGRAM |
| 2012-10-30 | Prometheus | Code contribution | $53,000,001 | PENTAGRAM |
| 2013-04-25 | Puzzle | Zero-day (UVE-2013-008) | $5,000,000 | PENTAGRAM |
| 2013-07-04 | Mortar | Zero-day (UVE-2013-020) | $10,000,000 | PENTAGRAM |
| 2015-08-06 | Firefighter | Code contribution | $125,000,000 | PENTAGRAM |
| 2016-02-02 | Prometheus | Code contribution | $265,000,000 | PENTAGRAM |
| 2018-03-06 | Clock Tower | Confidential informant | $7,500,000 | UIU |
TOP SECRET
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: Rootkit?
Date: 2018/02/14 10:47 AM
John,
I'd like to arrange a meeting to discuss a rootkit that the UIU may already be aware of, which possesses a potent ontological effect on the CU of every CPU we've been able to test with. We have reason to believe this originated with the Pentagram, this may necessitate a bit of coordination between ourselves to contain this rootkit. We haven't yet confirmed to what extent this exists in the wild due to the size of the testing apparatus, but we're hoping to have something definitive within the next 30 days.
Your assistance and expertise on this would be appreciated.
Thanks,
Chuck Thompson, Senior Researcher
SCP Foundation
Secure, Contain, Protect
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/02/15 08:20 AM
John,
Thank you for the response. We figured it out thanks to some new technology from the Site-11 labs in the field of applied digital ontology. I'm attaching an internal ticket that includes what we know and the steps to detect it. It involves quite a lot of math that I don't fully understand but I'm told by multiple sources it's the most likely conclusion. I think upon reading, you'll understand the severity of the issue. In the wrong hands the amount of control would be truly beyond the pale.
Attachment: 20171102152654-RAISA_FSET_a023ff6c.html (232.6 KiB)
From: Marshall, Isaiah - PENTAGRAM <████████████████>
To: John Powers - C3I
Subject: RE: FW: RE: Rootkit?
Date: 2018/02/15 1:08 PM
We'll need a little time to remediate this flaw and we'll push a new Whisper build to staging, subscribe to the whisper-scpf-hotfix-2018 branch and you'll be notified when this is ready for testing (Oliver can help you do this.)
Thanks, talk soon.
Isaiah
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/02/19 11:03 AM
Thanks for the update. Keep me posted please.
From: Magic - PENTAGRAM Mailing List <███████████████>
To: whisper-scpf-hotfix-2018 subscribers
Subject: [#1] Fixed error in ARBITER
Date: 2018/02/27 2:21 PM
mwilliamson wrote:
- fixed fuckery in arbiter's heuristic-based evasion
- new test suite for arbiter->recv() to mitigate scpf incident
- monte carlo and bayesian simulations both clean after 1 million iterations
Merged into master by mwilliamson.
You are receiving this email from the Magic distributed code deployment suite because you are subscribed to events for pentagram/whisper/whisper-scpf-hotfix-2018. If you do not wish to receive further communication, just reply with "Unsubscribe."
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Good news
Date: 2018/03/05 11:27 PM
John,
Great to hear, thank you. I suspect we will still need to continue investigating on our side though. I don't doubt that the teams involved are good at what they do, but the ramifications of false assumptions here are too grave to ignore, unless you have some significantly compelling evidence for me.
Chuck
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Question
Date: 2018/03/06 1:58 PM
I do consider myself a citizen first and foremost, and love my country. I believe you when you say there are enemies abroad, I've seen too much in my work not to. But the Foundation pays my bills, and I have a job to do. I hope you can see things from my side. Frankly, it is not currently worth my while to stop the investigation yet.
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Proposal
Date: 2018/03/06 2:26 PM
Not here. Meet me at the Good Guy's Club on Wisconsin Avenue tonight, 10PM.
From: Abrams, Max - UIU(ASD) <██████████████████>
To: John Powers - C3I
Subject: RE: OIA - Charles Thompson (767-36-3516)
Date: 2018/03/06 4:54 PM
Approved at $7,500,000.00. Confidential Informant name will be Clock Tower. Sign and return via email.
MA
Attachment: Otherwise Illegal Activity - Clock Tower.pdf (90.1 KiB)
From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/03/07 1:35 AM
Thank you. I understand now where you're coming from, and there are more important matters for us to focus on. Consider it handled.
Thanks,
Chuck Thompson, Senior Researcher
SCP Foundation
Secure, Contain, Protect
TOP SECRET
PENDING OFFICIAL REVIEW
For further updates, please contact John Powers, UIU(C3I)
Classified By: John Powers, UIU(C3I)
Reason: 1.5 (c) and (e)
Declassify On: X1
TOP SECRET
Cite this page as:
"UIU File: 2017-102" by pxdnbluesoul and aismallard, from the SCP Wiki. Source: https://scpwiki.com/uiu-file-2017-102. Licensed under CC-BY-SA.
For more information, see Licensing Guide.
Licensing Disclosures
Filename: UIU_Logo.svg
Author:Zhange,
Woedenaz
License: CC-BY-SA 3.0
Source Link: Unusual Incidents Unit BHL Theme
For more information about on-wiki content, visit the Licensing Master List.
