{
	"id": "5fc2c9c7-322f-4987-aa3a-621e36e49cbb",
	"created_at": "2026-04-06T00:12:55.351843Z",
	"updated_at": "2026-04-10T03:29:45.241115Z",
	"deleted_at": null,
	"sha1_hash": "caa826b498c4545245fda4a1118c361ad54ac38b",
	"title": "‘Shadow Brokers’ Whine That Nobody Is Buying Their Hacked NSA Files",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 37792,
	"plain_text": "‘Shadow Brokers’ Whine That Nobody Is Buying Their Hacked\r\nNSA Files\r\nBy Janus Rose\r\nPublished: 2016-10-01 · Archived: 2026-04-05 15:38:31 UTC\r\nThe hacking group responsible for stealing a large cache of National Security Agency hacking tools is very upset\r\nthat no one seems to be bidding on their pilfered files.\r\nEarly Saturday morning, the person or group which calls itself “TheShadowBrokers” authored another bizarre\r\nrant, expressing their annoyance at the seeming lack of interest in ponying up bitcoins to release the full set of\r\nstolen files.\r\nVideos by VICE\r\n“Peoples is having interest in free files … But people is no interest in #EQGRP_Auction,” the mysterious hacker\r\ngroup complained in a ranting post on Medium, which seems to be purposely written in Borat-style broken\r\nEnglish. “TheShadowBrokers is thinking this is information communication problem.”\r\nThe message also blindly lashes out at hackers, foreign intelligence services, and basically anyone else who hasn’t\r\nbid on the files.\r\n“TheShadowBrokers … is thinking peoples is having more balls, is taking bigger risks for to make advantage over\r\nadversaries,” the group adds. “Equation Group is pwning you everyday, because you are giant fucking pussies.”\r\nTheShadowBrokers originally made headlines after posting a sample of the cache, which contained exploit code\r\nmatching the names and functionality of several previously-revealed NSA hacking tools. The contents and\r\norganization of the files led experts to conclude that they were accidentally left behind on a compromised server\r\nonce used as a staging area by an NSA-linked hacking entity called Equation Group.\r\nThat theory was reinforced last week, when Reuters reported that “four people with direct knowledge” of an FBI\r\ninvestigation into the leak had stated that the files were found by Russian hackers after NSA operatives\r\n“mistakenly” abandoned them on a remote server. There is still no conclusive evidence that TheShadowBrokers is\r\nassociated with Russian intelligence services, however.\r\nMotherboard reached out to the hackers and will post an update if we receive a response. However, the group\r\nstated in their Medium post that they would only agree to interviews if offered money.\r\nOf course, it’s not exactly surprising that no one is rushing to bid on the group’s stolen files. While the tools are\r\nlikely legit, the high profile of the leak makes it insanely risky, and the suspected age of the exploit code makes it\r\nunclear whether the hacks are even still effective.\r\nhttps://www.vice.com/en_us/article/53djj3/shadow-brokers-whine-that-nobody-is-buying-their-hacked-nsa-files\r\nPage 1 of 2\n\nAt the time of this writing, TheShadowBrokers have only received bids for a total of 1.76 bitcoins—or about\r\n$1,082—far below the group’s asking price of $1 million.\r\nSource: https://www.vice.com/en_us/article/53djj3/shadow-brokers-whine-that-nobody-is-buying-their-hacked-nsa-files\r\nhttps://www.vice.com/en_us/article/53djj3/shadow-brokers-whine-that-nobody-is-buying-their-hacked-nsa-files\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MISPGALAXY",
		"Malpedia",
		"ETDA"
	],
	"references": [
		"https://www.vice.com/en_us/article/53djj3/shadow-brokers-whine-that-nobody-is-buying-their-hacked-nsa-files"
	],
	"report_names": [
		"shadow-brokers-whine-that-nobody-is-buying-their-hacked-nsa-files"
	],
	"threat_actors": [
		{
			"id": "b740943a-da51-4133-855b-df29822531ea",
			"created_at": "2022-10-25T15:50:23.604126Z",
			"updated_at": "2026-04-10T02:00:05.259593Z",
			"deleted_at": null,
			"main_name": "Equation",
			"aliases": [
				"Equation"
			],
			"source_name": "MITRE:Equation",
			"tools": null,
			"source_id": "MITRE",
			"reports": null
		},
		{
			"id": "d4f7cf97-9c98-409c-8b95-b80d14c576a5",
			"created_at": "2022-10-25T16:07:24.561104Z",
			"updated_at": "2026-04-10T02:00:05.03343Z",
			"deleted_at": null,
			"main_name": "Shadow Brokers",
			"aliases": [],
			"source_name": "ETDA:Shadow Brokers",
			"tools": [],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "171b85f2-8f6f-46c0-92e0-c591f61ea167",
			"created_at": "2023-01-06T13:46:38.830188Z",
			"updated_at": "2026-04-10T02:00:03.114926Z",
			"deleted_at": null,
			"main_name": "The Shadow Brokers",
			"aliases": [
				"Shadow Brokers",
				"ShadowBrokers",
				"The ShadowBrokers",
				"TSB"
			],
			"source_name": "MISPGALAXY:The Shadow Brokers",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "08623296-52be-4977-8622-50efda44e9cc",
			"created_at": "2023-01-06T13:46:38.549387Z",
			"updated_at": "2026-04-10T02:00:03.020003Z",
			"deleted_at": null,
			"main_name": "Equation Group",
			"aliases": [
				"Tilded Team",
				"EQGRP",
				"G0020"
			],
			"source_name": "MISPGALAXY:Equation Group",
			"tools": [
				"TripleFantasy",
				"GrayFish",
				"EquationLaser",
				"EquationDrug",
				"DoubleFantasy"
			],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "2d9fbbd7-e4c3-40e5-b751-27af27c8610b",
			"created_at": "2024-05-01T02:03:08.144214Z",
			"updated_at": "2026-04-10T02:00:03.674763Z",
			"deleted_at": null,
			"main_name": "PLATINUM COLONY",
			"aliases": [
				"Equation Group "
			],
			"source_name": "Secureworks:PLATINUM COLONY",
			"tools": [
				"DoubleFantasy",
				"EquationDrug",
				"EquationLaser",
				"Fanny",
				"GrayFish",
				"TripleFantasy"
			],
			"source_id": "Secureworks",
			"reports": null
		},
		{
			"id": "e0fed6e6-a593-4041-80ef-694261825937",
			"created_at": "2022-10-25T16:07:23.593572Z",
			"updated_at": "2026-04-10T02:00:04.680752Z",
			"deleted_at": null,
			"main_name": "Equation Group",
			"aliases": [
				"APT-C-40",
				"G0020",
				"Platinum Colony",
				"Tilded Team"
			],
			"source_name": "ETDA:Equation Group",
			"tools": [
				"Bvp47",
				"DEMENTIAWHEEL",
				"DOUBLEFANTASY",
				"DanderSpritz",
				"DarkPulsar",
				"DoubleFantasy",
				"DoubleFeature",
				"DoublePulsar",
				"Duqu",
				"EQUATIONDRUG",
				"EQUATIONLASER",
				"EQUESTRE",
				"Flamer",
				"GRAYFISH",
				"GROK",
				"OddJob",
				"Plexor",
				"Prax",
				"Regin",
				"Skywiper",
				"TRIPLEFANTASY",
				"Tilded",
				"UNITEDRAKE",
				"WarriorPride",
				"sKyWIper"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434375,
	"ts_updated_at": 1775791785,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/caa826b498c4545245fda4a1118c361ad54ac38b.pdf",
		"text": "https://archive.orkl.eu/caa826b498c4545245fda4a1118c361ad54ac38b.txt",
		"img": "https://archive.orkl.eu/caa826b498c4545245fda4a1118c361ad54ac38b.jpg"
	}
}