Link to article: UIU File: 2017-102.
theme:black-highlighter-theme
theme:uiu-bhl-theme
info:start
info:end
component:license-box-end
content-panel
standalone
[[include theme:black-highlighter-theme]] [[include theme:uiu-bhl-theme]] [[include info:start]] **UIU File 2017-102:** WHISPER IN THE WIND **Authors:** [[*user pxdnbluesoul]] and [[*user aismallard]] **For [[[collaboration-contest|Collab-Con 2019]]]:** [[[unusual-incidents-unit-hub|Unusual Incidents Unit]]] & Pentagram. [[include info:end]] [[# top]] [[tabview]] [[Tab Initial Report]] = //Electronic copy below as per Federal Records Act// [[div class="content-panel standalone"]] = [[size 120%]] **UIU File 2017-102:** WHISPER IN THE WIND[[/size]] [[=image http://scp-wiki.wdfiles.com/local--files/theme%3Auiu-bhl-theme/UIU_Logo.svg]] **Attachments:** 1. Description and Capabilities 2. Bureau Record 3. Incoming Communications 4. Outgoing Communications **Classified By:** John Powers, UIU(C3I) **Reason:** 1.5 (c) and (e) **Declassify On:** X1 [[=]] [[size 120%]]**Unclassified when separated from classified enclosures**[[/size]] [[/=]] [[=]] [[size 120%]]**TOP SECRET**[[/size]] [[/=]] [[/div]] [[/tab]] [[tab Description and Capabilities]] **Name:** [[[scp-4406|Codename WHISPER IN THE WIND]]] **Irregularity Cross-reference:** Electronic, Thaumaturgic, Ontological, Surveillance, Software **Capabilities:** WHISPER IN THE WIND is currently capable of high- and low-level C2,[[footnote]]Command and Control[[/footnote]] including remote access to all peripherals onboard (including but not limited to serial communication, cameras, microphones, and human interface devices), screen recording, keylogging, arbitrary code execution, parallelized completion of tasks on remote computing devices, and advanced persistence across air-gapped and networked devices. **Purpose/Motive:** The WHISPER IN THE WIND project was proposed, in conjunction with Pentagram,[[footnote]]The Occult Branch of the Department of Defense[[/footnote]] to gain and retain access to systems as deemed necessary by the United States for the purposes of intercepting and obstructing terrorism, distribution of child pornography, and unlawful entry into the United States. **Modus Operandi:** Access to systems is provided and maintained by the WHISTLE protocol, continuously delivering the WHISTLE payload (WHISPER) across the globe in 45 different instruction set architectures using thaumically-enhanced ground-penetrating radar. Once WHISTLE has delivered the payload, the WHISPER suite will verify all devices on the local area network have received the payload, and will then call home and be available to receive instructions. **Behavior:** WHISPER is a thaumically-augmented rootkit developed in conjunction with Pentagram (See Pentagram Documentation, "CARELESS WHISPER" Ontological C2 Suite). Once delivered to a host, WHISPER is capable of inspecting, modifying, and emptying the host's counters and registers at will. WHISPER is capable of intelligently analyzing and negating efforts to detect or access itself by manipulating the ontological validity of registers on-the-fly, replacing their values with those that are beneficial to the continued existence and operation of WHISPER. **Results:** Currently, WHISPER IN THE WIND has been credited with stopping or affecting over ███ cases of terrorism; child pornography; human trafficking; illegal entry into the United States; or drug trafficking. WHISPER has been successfully delivered to over ███████████ devices around the world. [[=]] [[size 120%]]**TOP SECRET**[[/size]] [[/=]] [[/tab]] [[tab Bureau Record]] **Current Status:** The project has been successful thus far with only minimal extraneous costs and complications, largely ameliorated by UIU's HUMINT activities with related organizations. **Schedule A:** HUMINT Pay Schedule ||~ Date ||~ Contact ||~ Reason ||~ Payout||~ Funding Source|| || 2001-01-13 || Longbow || Zero-day (UVE-2001-001) ||$25,000||PENTAGRAM|| || 2001-01-15 || Longbow || Zero-day (UVE-2001-002) ||$35,000||PENTAGRAM|| || 2001-08-01 || Ambrosia || Zero-day (UVE-2001-006) ||$75,000||PENTAGRAM|| || 2002-06-23 || Clam Sauce || Zero-day (UVE-2002-001) ||$50,000||PENTAGRAM|| || 2004-11-16 || Longbow || Zero-day (UVE-2004-011) ||$250,000||PENTAGRAM|| || 2005-09-03 || Notre Dame || Zero-day (UVE-2005-003) ||$10,000||PENTAGRAM|| || 2005-12-26 || Prometheus || Code contribution ||$10,000,000||PENTAGRAM|| || 2006-05-20 || Prometheus || Code contribution ||$15,000,000||PENTAGRAM|| || 2006-06-16 || Notre Dame || Confidential informant ||$1,000,000||UIU|| || 2008-01-03 || Longbow || Zero-day (UVE-2008-001) ||$500,000||PENTAGRAM|| || 2011-03-04 || Mamba || Code contribution ||$26,000,000||PENTAGRAM|| || 2012-10-30 || Prometheus || Code contribution ||$53,000,001||PENTAGRAM|| || 2013-04-25 || Puzzle || Zero-day (UVE-2013-008)||$5,000,000||PENTAGRAM|| || 2013-07-04 || Mortar || Zero-day (UVE-2013-020) ||$10,000,000||PENTAGRAM|| || 2015-08-06 || Firefighter || Code contribution ||$125,000,000||PENTAGRAM|| || 2016-02-02 || Prometheus || Code contribution ||$265,000,000||PENTAGRAM|| || 2018-03-06 || Clock Tower || Confidential informant ||$7,500,000||UIU|| [[=]] [[size 120%]]**TOP SECRET**[[/size]] [[/=]] [[/tab]] [[tab Incoming Communications]] **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** Rootkit? **Date:** 2018/02/14 10:47 AM John, I'd like to arrange a meeting to discuss a rootkit that the UIU may already be aware of, which possesses a potent ontological effect on the CU of every CPU we've been able to test with. We have reason to believe this originated with the Pentagram, this may necessitate a bit of coordination between ourselves to contain this rootkit. We haven't yet confirmed to what extent this exists in the wild due to the size of the testing apparatus, but we're hoping to have something definitive within the next 30 days. Your assistance and expertise on this would be appreciated. Thanks, Chuck Thompson, Senior Researcher SCP Foundation Secure, Contain, Protect ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Rootkit? **Date:** 2018/02/15 08:20 AM John, Thank you for the response. We figured it out thanks to some new technology from the Site-11 labs in the field of applied digital ontology. I'm attaching an internal ticket that includes what we know and the steps to detect it. It involves quite a lot of math that I don't fully understand but I'm told by multiple sources it's the most likely conclusion. I think upon reading, you'll understand the severity of the issue. In the wrong hands the amount of control would be truly beyond the pale. //Attachment:// {{20171102152654-RAISA_FSET_a023ff6c.html (232.6 KiB)}} ---- **From:** Marshall, Isaiah - PENTAGRAM <████████████████> **To:** John Powers - C3I **Subject:** RE: FW: RE: Rootkit? **Date:** 2018/02/15 1:08 PM We'll need a little time to remediate this flaw and we'll push a new Whisper build to staging, subscribe to the {{whisper-scpf-hotfix-2018}} branch and you'll be notified when this is ready for testing (Oliver can help you do this.) Thanks, talk soon. Isaiah ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Rootkit? **Date:** 2018/02/19 11:03 AM Thanks for the update. Keep me posted please. ---- **From:** Magic - PENTAGRAM Mailing List <███████████████> **To:** whisper-scpf-hotfix-2018 subscribers **Subject:** [#1] Fixed error in ARBITER **Date:** 2018/02/27 2:21 PM //mwilliamson wrote:// [[size 90%]]{{- fixed fuckery in arbiter's heuristic-based evasion}}[[/size]] [[size 90%]]{{- new test suite for arbiter->recv() to mitigate scpf incident}}[[/size]] [[size 90%]]{{- monte carlo and bayesian simulations both clean after 1 million iterations}}[[/size]] Merged into master by mwilliamson. [[size 70%]]//You are receiving this email from the Magic distributed code deployment suite because you are subscribed to events for {{pentagram/whisper/whisper-scpf-hotfix-2018}}. If you do not wish to receive further communication, just reply with "Unsubscribe."//[[/size]] ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Good news **Date:** 2018/03/05 11:27 PM John, Great to hear, thank you. I suspect we will still need to continue investigating on our side though. I don't doubt that the teams involved are good at what they do, but the ramifications of false assumptions here are too grave to ignore, unless you have some significantly compelling evidence for me. Chuck ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Question **Date:** 2018/03/06 1:58 PM I do consider myself a citizen first and foremost, and love my country. I believe you when you say there are enemies abroad, I've seen too much in my work not to. But the Foundation pays my bills, and I have a job to do. I hope you can see things from my side. Frankly, it is not currently worth my while to stop the investigation yet. ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Proposal **Date:** 2018/03/06 2:26 PM Not here. Meet me at the Good Guy's Club on Wisconsin Avenue tonight, 10PM. ---- **From:** Abrams, Max - UIU(ASD) <██████████████████> **To:** John Powers - C3I **Subject:** RE: OIA - Charles Thompson (767-36-3516) **Date:** 2018/03/06 4:54 PM Approved at $7,500,000.00. Confidential Informant name will be Clock Tower. Sign and return via email. MA //Attachment:// {{Otherwise Illegal Activity - Clock Tower.pdf (90.1 KiB)}} ---- **From:** Thompson, Charles - SCP Foundation <███████████████████> **To:** John Powers - C3I **Subject:** RE: Rootkit? **Date:** 2018/03/07 1:35 AM Thank you. I understand now where you're coming from, and there are more important matters for us to focus on. Consider it handled. Thanks, Chuck Thompson, Senior Researcher SCP Foundation Secure, Contain, Protect ---- [[=]] [[size 120%]]**TOP SECRET**[[/size]] [[/=]] [[/tab]] [[tab Outgoing Communications]] [[=]] [[size 120%]]**PENDING OFFICIAL REVIEW** For further updates, please contact John Powers, UIU(C3I)[[/size]] [[/=]] **Classified By:** John Powers, UIU(C3I) **Reason:** 1.5 (c) and (e) **Declassify On:** X1 [[=]] [[size 120%]]**TOP SECRET**[[/size]] [[/=]] [[/tab]] [[/tabview]] [[=]] [#top Go To Top ↑] [[/=]] [[footnoteblock]] [[include component:license-box |author=pxdnbluesoul and aismallard]] ===== > **Filename:** UIU_Logo.svg > **Author:** [[*user Zhange]], [[*user Woedenaz]] > **License:** CC-BY-SA 3.0 > **Source Link:** [[[theme:uiu-bhl-theme|Unusual Incidents Unit BHL Theme]]] ===== [[include component:license-box-end]]