Monday, September 26, 2016

Google Allo and Privacy


Google recently presented their new chat app service called Allo.  Privacy concerns were immediately an issue since Allo does not provide end-to-end encryption.  The issue at hand, is that Google originally presented that their chat app would have full security features, yet this past week launched Allo without strong encryption features.  Some are claiming this chat app is actually a honeypot for government surveillance purposes.  The real reason is still open to debate.  Privacy issues are a constant concern for users, providers, cyber security and associated statutes.  Wapack Labs will continue to monitor this issue.  This information is being supplied for your situational awareness. 



Publication date:                         25 September 2016

Handling requirements:               Traffic light protocol (TLP) GREEN

Attribution/Threat Actors:           Unknown  

Actor Type:                                  Adversary capabilities have been assessed as Tier I*

Potential Targets:                         USA

Past Reporting:                             Red Sky Alliance: DOC-1800, message/3507#3507

*Practitioners who rely on others to develop the malicious code, delivery mechanisms, and execution strategy (use known exploits).

The full attribution report has been published in its entirety in the Red Sky Alliance portal.  For more information please contact the lab directly at 844-4-WAPACK, 603-606-1246, or feedback@wapacklabs.com.

About Wapack Labs

Wapack Labs, located in New Boston, NH is a Cyber Threat Analysis and Intelligence organization supporting the Red Sky Alliance, the FS-ISAC and individual organizations by offering expert level targeted intelligence analysis answering some of the hardest questions in Cyber.  Wapack Labs’ engineers, researchers and analysts use deep analysis techniques and visualization to design and deliver transformational cyber-security analysis tools that fuse open source and proprietary information.  The intelligence derived from these tools and techniques serve as the foundation of Wapack Labs’ information reporting to the cyber-security teams of its customers and industry partners located around the world.