Hacking Team became a hot topic ever since more than 400 gigabytes of data were leaked, including client lists, email addresses, and multiple examples of 0-day attacks. Researchers and developers around the globe didn't hesitate to analyze the content, and this has led to the creation of tools like Milano, offered free by the folks at Rook Security to check if our computers are infected.
400 gigabytes of data is not a simple package. In the context of leaks, it's probably equivalent to the Grand Canyon of Colorado. These days, hackers are capable of doing incredible things, but if we focus on what has happened with Hacking Team the feeling is that it was an internal maneuver. For those reading about Hacking Team for the first time, it's an IT security company based in Milan, which offers different services to governments, agencies, and corporations. Hacking Team is one of the many names that seeks to “professionalize” hacking, and if we consider its client list (the FBI, the DEA, the Spanish National Intelligence Center, Deutsche Bank, British Telecom, South Korean intelligence, governments of Honduras and Mexico, etc.), they have definitely achieved it.
The problem lies in the notable amount of “0-day” and other vulnerabilities that emerged with the leak. Even the theft of open source code was detected, with developers accused of collaborating with the company. The people in charge of the affected programs are working against the clock to eliminate the exposed vulnerabilities of Hacking Team, but the folks at Rook Security decided to go a step further and offer online a free tool called Milano. Basically, it's a dedicated scanner with a database combining more than 800 files, including executables and .dll libraries that have been used in some way by Hacking Team, or that directly have a malicious role. The quick scan of Milano takes a few seconds, but if you choose the deep analysis, you'll have to wait between fifteen and twenty minutes. The results are saved in a text file inside the folder where the executable is located.
Milano is a tool in full development, and as time goes by, Rook Security plans to implement additional functions, such as automatic updating of its database. In the future, they will also seek to simplify the process for Linux and OS X users, also affected by Hacking Team's “tools”. Milano is accompanied by a PDF file with a detailed report on the work so far, in case someone needs additional information. Even if you think you're protected, it will only take a few seconds.
