WikiLeaks publishes “AfterMidnight” and “Assassin”, two CIA malware frameworks for the Microsoft Windows platform.

“AfterMidnight” allow operators to dynamically load and execute malware payloads on a target machine. The main controller disguises as a self-persisting Windows Service DLL and provides secure execution of “Gremlins” via a HTTPS based Listening Post (LP) system called “Octopus”. Once installed on a target machine AM will call back to a configured LP on a configurable schedule, checking to see if there is a new plan for it to execute. If there is, it downloads and stores all needed components before loading all new gremlins in memory. “Gremlins” are small AM payloads that are meant to run hidden on the target and either subvert the functionality of targeted software, survey the target (including data exfiltration) or provide internal services for other gremlins. The special payload “AlphaGremlin” even has a custom script language which allows operators to schedule custom tasks to be executed on the target machine.

“Assassin” is a similar kind of malware; it is an automated implant that provides a simple collection platform on remote computers running the Microsoft Windows operating system. Once the tool is installed on the target, the implant is run within a Windows service process. “Assassin” (just like “AfterMidnight”) will then periodically beacon to its configured listening post(s) to request tasking and deliver results. Communication occurs over one or more transport protocols as configured before or during deployment. The “Assassin” C2 (Command and Control) and LP (Listening Post) subsystems are referred to collectively as” The Gibson” and allow operators to perform specific tasks on an infected target.

Leaked Documents

DOC: AfterMidnight v1.0 Users Guide

DOC: AfterMidnight Diagrams

DOC: AlphaGremlin v0.1.0 Users Guide

DOC: Assassin v1.4 Users Guide

DOC: Assassin v1.3 Training      see more

Editor’s Note:

We humbly seek your support and ask for your generosity in helping us to continue to report to you on news and information you’ll not be getting with the lamestream propaganda media. All our authors have a passion for getting their information out to the general public regardless of compensation.

SHARE: To get the word out please copy the article URL to post and comment on your social media platforms. Citizen journalists like NHN are under assault by the federal government, media and internet companies. The US government passed the NDAA which is anti-Free Speech and Censorship law. The Bill was passed by a REPUBLICAN congress and signed into law in the dead of night on Christmas Eve, 2016 by Islam Emperor Obama. Free Speech is under attack and NDAA has legalized censorship by Google, Facebook, Twitter, YouTube, Vimeo and most internet platforms. Internet is controlled by globalists and leftists. Establishment republicans (GOPe) are just as dangerous as democrats for both are Tyrants! Near all internet hosts suppress and censors articles and videos that do not toe the leftist, globalist and totalitarian line.

COMMENT: Commentsare disabled on NHN website due to obscenely high spamming. Each article opened to comments averaged around 500 spam comments daily. We have anti-spam software but these spammers spend tons of money to bypass. I guess the Google algorithm does not suppress or censor spam attacks, only prevents us from being found using using key word searches. This site is SEO optimized but to no avail when trying to out-maneuver the spammers and censor algorithms. We depend on you to share and comment on your social media.

DONATE:  No one at NH is salaried or compensated and all of us are fine with that. Our passion is to disseminate information the lamestream media will not. We are all Patriots at NHN and a new media site that started in 2017. We generate no income and we row the same boat Passion together. If you like our writing please make a one-time or freewill contribution by going to DONATE. We process securely through Paypal.

NHN has in August, 2017 joined monetized video platforms. As a result we established a Revenue Sharing Program to share with our regular authors who link to our monetized videos.

REWARDS PROGRAM: We have a rewards program set up to reward all who wish to help us financially. Please visit us at Patreon.com/NHN for details.

Support us monthly on Patreon                            $1 per month minimum. Tier program with rewards to our benefactors

Support us one-time on NHN Website              $12 MINIMUM using secure PayPal processing

Follow NHN on Vidme                                               Alternative to YouTube; Join Vidme, its FREE and unlike YouTube UNCENSORED

Follow us on Minds.com                                           Alternative to Fakebook. Join Minds.com; its FREE and unlike Facebook UNCENSORED

Follow us on Gab.ai/NHN                                           Alternative to Twitter; Join Gab, its FREE and unlike Twitter UNCENSORED