Government Trojan - Evidence of Magic Lantern?

I think I may have a government-made trojan, but I don't have the expertise to make that determination. I'm hoping someone here does.

Two years ago, I worked for a bank, and left after about a year. I've since been raising a family, and had no idea anything was out of the ordinary.

Just recently, however, the feds revealed in court documents that I am the target of a federal investigation into alleged embezzlement at the bank. As part of that investigation, it appears that federal agents attempted to install a "Magic Lantern" type trojan on my computer via an email.

What makes me suspicious?

1. The email (which I believe actually came from the feds) supposedly came from a former colleague of mine at the bank at which I'm accused of the embezzlement. I hadn't had any contact with my former colleages for over a year.

2. The day after I opened the email, out of the blue, federal agents conducted a raid on my property.

3. When I was still employed by the bank - before any allegation of wrongdoing was made - the colleague sent me the same pictures. I compared the properties of the Before/After pictures. The original pictures are of a smaller file-size than those sent by the feds.

I wanted to post the suspicious files here, but I ran into file-size limitations (568kb total). I'd like to have the files analyzed to determine whether they have any trojan-like capabilities. Is anyone here willing and capable of performing such an analysis?

Wow

What government are we talking about??

What kinda pictures are those pictures.....like are they illegal pictures....in your country...my country..???

Why is the government so interested in you?

What did you do??

Copy a music cd ;)

MLF

Quote:

---

Copy a music cd

---

LOL! :D

Quote:

---

You must spread some Reputation around before giving it to morganlefay again.

---

Hi, a Happy New Year, and welcome to AO.

Quote:

---

Just recently, however, the feds revealed in court documents that I am the target of a federal investigation into alleged embezzlement at the bank.

---

1. Is that you in the singular, or as part of the team or department/office where the fraud is alleged to have taken place?

It is normal (and good) practice to investigate ALL personnel in cases such as this. Otherwise you give the defence attorneys a brilliant opportunity to introduce "reasonable doubt" that someone else did it and you are just the "fall guy" or "patsy" because the Feds are incompetent ;)

2. If it is just you, have any arraignment or charging procedures been instigated?

3. If the answer to either #1 or #2 is "yes" I would strongly advise you to seek the advice of an attorney. Only do this if you are actually being accused, as opposed to investigated. Attorneys are expensive, but if you are in real danger you do not want to contaminate any possible evidence of misfeasance on the part of the authorities?

As for this "Trojan", please don't do anything that would remove or damage it. Please use the PM (personal messaging) system on this site to contact me and I will give you an e-mail address to which you can send attachments of up to 10 megabytes per message.

Now, what are the other possibilities? could it be that you have been sent this information (again!) in order to incriminate you? That would not be the Feds, that would be the true Perp(s) :cool:

Do I know what I am talking about?........... well, there is always a first time isn't there? :D

I won't disclose any more than that, although I have conducted numerous "rat hunts" the only one I ever did for a US financial institution was for W**** F****, so I do know how they operate.

Incidentally, the "Trojan", if there is one, will be embedded in the body of the e-mail, not in the pictures. If there is anything in the pictures, it will be using "Steganography", but it is pretty clumsy and difficult to extract, reassemble and run an executable from that environment. That would be when I would suspect a "set-up".

Good luck

Wow, intense stuff. Post the pics :)

http://en.wikipedia.org/wiki/Magic_L...%28software%29

I apologize...

I appeared to use sarcasm in my response...

I remember some conspiracy theroies how the government would release trojans to the public...to monitor activies.....

or use existing infections to do so.

Then there is the old NSA registry key which was supposed to reside in all windows OSes??

So...bear with me...if I am alittle skeptical on these types of questions...

although I dont trust the current US administration

MLF

Well there's plenty of keylogging and monitoring software packages out there. Beats me why the Feds would want one of their own, sort of like reinventing the wheel?

I know that there were suggestions that it would be deliberately "ignored" by anti-malware packages............. well that I don't buy for one second.

1. Anti-malware detects potential malware period.............or it tries to.
2. A lot of those products are from companies that are not under US jurisdiction.
3. If you leave a backdoor, how long before the bad guys find it, exploit it, and leave your security product with no street cred whatsoever?
4. It is legally questionable, if only that if it allows remote access then that leaves the whole question of planted evidence wide open.

Admissible computer forensic evidence needs to be collected in accordance with very strict rules, I doubt that this method would comply.

Having said that, I could envisage something of this nature being used as a "fishing expedition"