UIU File: 2017-102

rating: +61+–x



close

Info

X

UIU File 2017-102: WHISPER IN THE WIND

Authors: pxdnbluesoul and aismallard

For Collab-Con 2019:
Unusual Incidents Unit & Pentagram.

rating: +61+–x

Electronic copy below as per Federal Records Act

UIU File 2017-102: WHISPER IN THE WIND

Attachments:
1. Description and Capabilities
2. Bureau Record
3. Incoming Communications
4. Outgoing Communications

Classified By: John Powers, UIU(C3I)
Reason: 1.5 (c) and (e)

Declassify On: X1

Unclassified when separated from classified enclosures

TOP SECRET

Name: Codename WHISPER IN THE WIND

Irregularity Cross-reference: Electronic, Thaumaturgic, Ontological, Surveillance, Software

Capabilities: WHISPER IN THE WIND is currently capable of high- and low-level C2,¹ including remote access to all peripherals onboard (including but not limited to serial communication, cameras, microphones, and human interface devices), screen recording, keylogging, arbitrary code execution, parallelized completion of tasks on remote computing devices, and advanced persistence across air-gapped and networked devices.

Purpose/Motive: The WHISPER IN THE WIND project was proposed, in conjunction with Pentagram,² to gain and retain access to systems as deemed necessary by the United States for the purposes of intercepting and obstructing terrorism, distribution of child pornography, and unlawful entry into the United States.

Modus Operandi: Access to systems is provided and maintained by the WHISTLE protocol, continuously delivering the WHISTLE payload (WHISPER) across the globe in 45 different instruction set architectures using thaumically-enhanced ground-penetrating radar. Once WHISTLE has delivered the payload, the WHISPER suite will verify all devices on the local area network have received the payload, and will then call home and be available to receive instructions.

Behavior: WHISPER is a thaumically-augmented rootkit developed in conjunction with Pentagram (See Pentagram Documentation, "CARELESS WHISPER" Ontological C2 Suite). Once delivered to a host, WHISPER is capable of inspecting, modifying, and emptying the host's counters and registers at will. WHISPER is capable of intelligently analyzing and negating efforts to detect or access itself by manipulating the ontological validity of registers on-the-fly, replacing their values with those that are beneficial to the continued existence and operation of WHISPER.

Results: Currently, WHISPER IN THE WIND has been credited with stopping or affecting over ███ cases of terrorism; child pornography; human trafficking; illegal entry into the United States; or drug trafficking. WHISPER has been successfully delivered to over ███████████ devices around the world.

TOP SECRET

Date	Contact	Reason	Payout	Funding Source
2001-01-13	Longbow	Zero-day (UVE-2001-001)	$25,000	PENTAGRAM
2001-01-15	Longbow	Zero-day (UVE-2001-002)	$35,000	PENTAGRAM
2001-08-01	Ambrosia	Zero-day (UVE-2001-006)	$75,000	PENTAGRAM
2002-06-23	Clam Sauce	Zero-day (UVE-2002-001)	$50,000	PENTAGRAM
2004-11-16	Longbow	Zero-day (UVE-2004-011)	$250,000	PENTAGRAM
2005-09-03	Notre Dame	Zero-day (UVE-2005-003)	$10,000	PENTAGRAM
2005-12-26	Prometheus	Code contribution	$10,000,000	PENTAGRAM
2006-05-20	Prometheus	Code contribution	$15,000,000	PENTAGRAM
2006-06-16	Notre Dame	Confidential informant	$1,000,000	UIU
2008-01-03	Longbow	Zero-day (UVE-2008-001)	$500,000	PENTAGRAM
2011-03-04	Mamba	Code contribution	$26,000,000	PENTAGRAM
2012-10-30	Prometheus	Code contribution	$53,000,001	PENTAGRAM
2013-04-25	Puzzle	Zero-day (UVE-2013-008)	$5,000,000	PENTAGRAM
2013-07-04	Mortar	Zero-day (UVE-2013-020)	$10,000,000	PENTAGRAM
2015-08-06	Firefighter	Code contribution	$125,000,000	PENTAGRAM
2016-02-02	Prometheus	Code contribution	$265,000,000	PENTAGRAM
2018-03-06	Clock Tower	Confidential informant	$7,500,000	UIU

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: Rootkit?
Date: 2018/02/14 10:47 AM

John,

I'd like to arrange a meeting to discuss a rootkit that the UIU may already be aware of, which possesses a potent ontological effect on the CU of every CPU we've been able to test with. We have reason to believe this originated with the Pentagram, this may necessitate a bit of coordination between ourselves to contain this rootkit. We haven't yet confirmed to what extent this exists in the wild due to the size of the testing apparatus, but we're hoping to have something definitive within the next 30 days.

Your assistance and expertise on this would be appreciated.

Thanks,
Chuck Thompson, Senior Researcher
SCP Foundation
Secure, Contain, Protect

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/02/15 08:20 AM

John,

Thank you for the response. We figured it out thanks to some new technology from the Site-11 labs in the field of applied digital ontology. I'm attaching an internal ticket that includes what we know and the steps to detect it. It involves quite a lot of math that I don't fully understand but I'm told by multiple sources it's the most likely conclusion. I think upon reading, you'll understand the severity of the issue. In the wrong hands the amount of control would be truly beyond the pale.

Attachment: 20171102152654-RAISA_FSET_a023ff6c.html (232.6 KiB)

From: Marshall, Isaiah - PENTAGRAM <████████████████>
To: John Powers - C3I
Subject: RE: FW: RE: Rootkit?
Date: 2018/02/15 1:08 PM

We'll need a little time to remediate this flaw and we'll push a new Whisper build to staging, subscribe to the whisper-scpf-hotfix-2018 branch and you'll be notified when this is ready for testing (Oliver can help you do this.)

Thanks, talk soon.

Isaiah

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/02/19 11:03 AM

Thanks for the update. Keep me posted please.

From: Magic - PENTAGRAM Mailing List <███████████████>
To: whisper-scpf-hotfix-2018 subscribers
Subject: [#1] Fixed error in ARBITER
Date: 2018/02/27 2:21 PM

mwilliamson wrote:

- fixed fuckery in arbiter's heuristic-based evasion
- new test suite for arbiter->recv() to mitigate scpf incident
- monte carlo and bayesian simulations both clean after 1 million iterations

Merged into master by mwilliamson.

You are receiving this email from the Magic distributed code deployment suite because you are subscribed to events for pentagram/whisper/whisper-scpf-hotfix-2018. If you do not wish to receive further communication, just reply with "Unsubscribe."

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Good news
Date: 2018/03/05 11:27 PM

John,

Great to hear, thank you. I suspect we will still need to continue investigating on our side though. I don't doubt that the teams involved are good at what they do, but the ramifications of false assumptions here are too grave to ignore, unless you have some significantly compelling evidence for me.

Chuck

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Question
Date: 2018/03/06 1:58 PM

I do consider myself a citizen first and foremost, and love my country. I believe you when you say there are enemies abroad, I've seen too much in my work not to. But the Foundation pays my bills, and I have a job to do. I hope you can see things from my side. Frankly, it is not currently worth my while to stop the investigation yet.

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Proposal
Date: 2018/03/06 2:26 PM

Not here. Meet me at the Good Guy's Club on Wisconsin Avenue tonight, 10PM.

From: Abrams, Max - UIU(ASD) <██████████████████>
To: John Powers - C3I
Subject: RE: OIA - Charles Thompson (767-36-3516)
Date: 2018/03/06 4:54 PM

Approved at $7,500,000.00. Confidential Informant name will be Clock Tower. Sign and return via email.

Attachment: Otherwise Illegal Activity - Clock Tower.pdf (90.1 KiB)

From: Thompson, Charles - SCP Foundation <███████████████████>
To: John Powers - C3I
Subject: RE: Rootkit?
Date: 2018/03/07 1:35 AM

Thank you. I understand now where you're coming from, and there are more important matters for us to focus on. Consider it handled.

Thanks,
Chuck Thompson, Senior Researcher
SCP Foundation
Secure, Contain, Protect

TOP SECRET

Go To Top ↑

‡ Licensing / Citation

page revision: 14, last edited: 07 Oct 2024 05:49

Edit Rate (+61) Tags Discuss (6) History Files Print Site tools + Options