Title: CyberCOP

Release Date: 2015-01-12

Document Date: 2013-04-11

Description: These three slides, taken from a 11 April 2013 NSA presentation show screenshots from a tool called CyberCOP, which appears to monitor botnets and the DDOS attacks they perform: see the NDR.de article Cyberkrieg: Wie gefährdet ist Deutschland?, 12 January 2015.

Document: TOP SECRET//SI//REL TO USA, FVEY

CYBER

COP

CDOSG
Apr 11, 2013

CyberCOP Product Manager

Overall Classification: TOP SECRET//SI//REL TO USA,FVEY

TOP SECRET//SI//REL TO USA, FVEY

TOP SECRET//SI//REL TO USA, FVEY

CyberCOP 1.3

Intrusion Sets

Countries

Attacks

TS//SI//REL TO USA AUS CAN GBR NZL

VUGGY DDoS Attack

Mersad Co. attacked PROLEXIC TECHNOLOGIES. INC. for a few seconds.

about 5 hours ago 1

TOP SECRET//SI//REL TO USA, AUS. CAN. GBR. NZL

VUGGY DDoS Attack

Mersad Co. attacked COMPUTER SCIENCES CORPORATION for 37 minutes.

about S hours ago 1

TS//SI//REL TO USA AUS CAN GBR NZL

VUGGY DDoS Attack

Mersad Co. attacked UNION BANK OF CALIFORNIA for a few seconds.

about 6 hours ago 1

TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL

VUGGY DDoS Attack

Mersad Co. attacked CAPITAL ONE FINANCIAL CORPORATION for 38 minutes.

about 7 hours ago 1

TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL

VUGGY DDoS Attack

Mersad Co. attacked UNION BANK OF CALIFORNIA for 5 minutes.

14 Victims
37 C2 Nodes
■5.1k Bots

about 8 hours ago 1

TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL
VllfifïY nnnÇ Attarlc

Timeline

PROLEXIC TECHNOLOGIES, INC.

COMPUTER SCIENCES CORPORATION

UNION BANK OF CALIFORNIA

CAPITAL ONE FINANCIAL CORPORATION

FIRST BANK SYSTEM INC.

FIFTH THIRD BANK

PNC BAJW1

AT&T SERVICES, INC.

JPMORGAN CHASE « CO.

TOP SECRET//SI//REL TO USA, FVEY

TOP SECRET//SI//REL TO USA, FVEY

CyberCOP 1.5: Additional Botnets

TOP SECRET//SI//REL TO USA, FVEY