Security Researchers uncover a massive espionage campaign involving the theft of Call Detail Records, CDRs, from hacked mobile providers

According to a Boston based security firm, Cybereason, hackers have systematically broken in to more than 10 mobile carrier networks around the world and have stolen Call detail records (CDR) revealing times and dates of calls, and their cell-based locations. This seem to have gone over for seven years and seem to be ongoing. Call detail records, the CDRs are the most important to any intelligence agency’s collection efforts as hackers or people behind them could obtain all the information about a phone without ever breaking in to a phone.
So in addition to NSA, another entity, a foreign or external entity may know more about you and me.
Security Researchers uncover a massive espionage campaign involving the theft of Call Detail Records, CDRs, from hacked mobile providers.
Operation Soft Cell: A Worldwide Campaign Against Telecommunications Providers.

In 2018, the Cybereason Nocturnus team identified an advanced, persistent attack targeting global telecommunications providers carried out by a threat actor using tools and techniques commonly associated with Chinese-affiliated threat actors. Find the complete report here.
Typical CDR fields;

• historyid - This is the call number - each call has a number, internal to 3CX. Useful for call tracking.
• callid - This is the Call ID - the unique identifier of the call.
• duration - Call Duration time.
• time-start - Call Start time.
• time-answered - Answered time.
• time-end - Call terminated time.
• reason-terminated - Why the call was terminated.
• from-no - Source caller number.
• to-no - Destination To Number.
• from-dn - Distinguished name of caller - this is 3CX Specific Can be omitted by 3rd party developers.
• to-dn - Distinguished name of To - Destination - this is 3CX Specific Can be omitted by 3rd party developers.
• dial-no - Dialled number.
• reason-changed - The Reason why a change occurred in a call - example in a transfer you will see "ReplacedDst" which means that the destination was replaced with something else.
• final-number - Final Number - the final number which was replaced (In a transfer this will be the final connected number).
• final-dn - The Distinguished name of the final number entity - this is 3CX Specific and can be omitted by 3rd party dev.
• bill-code - Billing code dialed after the destination (for example: **Sales).
• bill-rate  - The billing rate that matched the prefix of the rate. This is used to apply a cost calculation variance.
• bill-cost - The Cost of the call calculated with simple proportion / minute.
• bill-name - The rate name of the billing variance.
• chain - All endpoints which were involved in the call.
• from-type - Source type.
• to-type - Destination type.
• final-type - Final destination type.
• from-dispname - Source Display Name.
• to-dispname - Destination Display Name.
• final-dispname - Final destination Display Name.

NSA releases GHIDRA, The reverse engineering toolkit, Receives Positive Gestures From the Infosec Community.

After mentioning about the release of the tool,NSA today finally released the complete source code for GHIDRA, at the RSA conference. The GHIDRA version 9.0.2 source tree is now available on its Github repository. It is a Java-based reverse engineering framework that features a graphical user interface (GUI) and runs on various platforms including Windows, MacOSX, and Linux.
 The tool is ideal for software engineers, but will be especially useful for malware and security  analysts first and foremost. GHIDRA is the NSA's home-grown classified software reverse engineering tool that agency experts have been using internally for over a decade to hunt down security bugs in software and applications.
The existence of GHIDRA was first publicly revealed by WikiLeaks in CIA Vault 7 leaks,  and subsequently the agency promised to release the tool. Today the tool was publicly released  at the RSA conference. The tool might fill the gap between basic HEX tools and expensive commercial reverse engineering tools like IDA-Pro.

• Github — source code
• Download GHIDRA 9.0 — software package, slides, and exercises
• Installation Guide — basic usage documentation
• Quick Ref — keyboard shortcuts
• Issue Tracker — report bugs