NSA Cyber Weapons Defense Tool by 360

Status
Not open for further replies.

Captain Awesome

Level 27
Thread author
Verified
Top Poster
Well-known
Forum Veteran
May 7, 2016
1,647
11,324
2,569
India
After reading the whole blog post I still don't know what this is supposed to do.
360’s NSA Cyber Weapons Defense Tool is designed to run without Internet connection. Therefore, you can patch the vulnerabilities without worrying the potential infection through the Internet.
 
360’s NSA Cyber Weapons Defense Tool is designed to run without Internet connection. Therefore, you can patch the vulnerabilities without worrying the potential infection through the Internet.
So it... delivers Windows Updates offline?

Edit: Yep. Looks like a portable, offline version of Patch Up that only looks for Windows security updates that protect against known NSA exploits:
aKZyFNO.png

Seems like more of a marketing tool to me; grab headlines with a catchy name about defending against NSA cyber weapons so the media will show it off and people download it, offer a big share button so those who download it spread the 360 brand then recommend people install 360 Total Security for optimal protection so their user base grows.
 
Last edited:
Probably it can fix the vulnerabilities offline after scanning the host system. The package is 135Mb and after decompression, it can get quite bigger. And since it won't be features-updates the tool will be installing, such updates may not have to be big always (assuming based on their mention of working offline).
I have another concern, will it connect to the internet and protect against future exploits?
 
I have another concern, will it connect to the internet and protect against future exploits?
I'd imagine once Microsoft releases a security update to patch a known NSA exploit it will connect to the internet and offer the ability to download/install said update from Microsoft's update catalogue.
 
I'm guessing here that these patches are
  • to protect you from being infected while online?
  • or prevent lateral infection while infected?
Facts: I have a PC fixed with NSATool
19511356_1651501664877496_382025992787962965_n.jpg


I was able to run Petya sample (although 360 TS blocked it, but I allowed it to check if NSATool can prevent it from running)

19430192_1653404731353856_2174954084913795738_n.jpg


Bait file encrypted
19437519_1653404708020525_3918635237350476729_n.jpg
 
I don't think it's more on a marketing tool but rather the description looks little bit exaggerated, although the purpose is so clear to detect if the system is infected by possible ransomware attacks that links on security vulnerabilities.
 
Should I install this tool?I mean is it worth?
If any one tested it pls let me know thnx.
 
Status
Not open for further replies.