Title: CyberCOP
Release Date: 2015-01-12
Document Date: 2013-04-11
Description: These three slides, taken from a 11 April 2013 NSA presentation show screenshots from a tool called CyberCOP, which appears to monitor botnets and the DDOS attacks they perform: see the NDR.de article Cyberkrieg: Wie gefährdet ist Deutschland?, 12 January 2015.
Document: TOP SECRET//SI//REL TO USA, FVEY
CYBER
COP
CDOSG
Apr 11, 2013
CyberCOP Product Manager
Overall Classification: TOP SECRET//SI//REL TO USA,FVEY
TOP SECRET//SI//REL TO USA, FVEY
TOP SECRET//SI//REL TO USA, FVEY
CyberCOP 1.3
Intrusion Sets
Countries
Attacks
TS//SI//REL TO USA AUS CAN GBR NZL
VUGGY DDoS Attack
Mersad Co. attacked PROLEXIC TECHNOLOGIES. INC. for a few seconds.
about 5 hours ago 1
TOP SECRET//SI//REL TO USA, AUS. CAN. GBR. NZL
VUGGY DDoS Attack
Mersad Co. attacked COMPUTER SCIENCES CORPORATION for 37 minutes.
about S hours ago 1
TS//SI//REL TO USA AUS CAN GBR NZL
VUGGY DDoS Attack
Mersad Co. attacked UNION BANK OF CALIFORNIA for a few seconds.
about 6 hours ago 1
TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL
VUGGY DDoS Attack
Mersad Co. attacked CAPITAL ONE FINANCIAL CORPORATION for 38 minutes.
about 7 hours ago 1
TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL
VUGGY DDoS Attack
Mersad Co. attacked UNION BANK OF CALIFORNIA for 5 minutes.
14 Victims
37 C2 Nodes
■5.1k Bots
about 8 hours ago 1
TOP SECRET//SI//REL TO USA AUS. CAN. GBR. NZL
VllfifïY nnnÇ Attarlc
Timeline
PROLEXIC TECHNOLOGIES, INC.
COMPUTER SCIENCES CORPORATION
UNION BANK OF CALIFORNIA
CAPITAL ONE FINANCIAL CORPORATION
FIRST BANK SYSTEM INC.
FIFTH THIRD BANK
PNC BAJW1
AT&T SERVICES, INC.
JPMORGAN CHASE « CO.
TOP SECRET//SI//REL TO USA, FVEY
TOP SECRET//SI//REL TO USA, FVEY
CyberCOP 1.5: Additional Botnets
TOP SECRET//SI//REL TO USA, FVEY