Equation Group (English Wikipedia)

"Inside the NSA's Ultra-Secret Hacking Group". Atlantic Council. June 11, 2013. Archived from the original on October 21, 2020. Retrieved July 27, 2023.

bloomberg.com (Global: 118^th place; English: 85^th place)

"China Accuses US of Repeated Hacks on Polytechnic University". Bloomberg. September 5, 2022 – via www.bloomberg.com.
Riley, Michael (June 14, 2013). "U.S. Agencies Said to Swap Data With Thousands of Firms". Bloomberg. Archived from the original on January 12, 2015. Retrieved January 18, 2014.

books.google.com (Global: 3^rd place; English: 3^rd place)

Hayden, Michael V. (February 23, 2016). Playing to the Edge: American Intelligence in the Age of Terror. Penguin Press. ISBN 978-1594206566. Retrieved April 1, 2021.
Aid, Matthew M. (June 8, 2010). The Secret Sentry: The Untold History of the National Security Agency. Bloomsbury USA. p. 311. ISBN 978-1-60819-096-6. Retrieved May 22, 2013.

businessweek.com (Global: 945^th place; English: 628^th place)

Riley, Michael (May 23, 2013). "How the U.S. Government Hacks the World". Bloomberg Businessweek. Archived from the original on May 25, 2013. Retrieved May 23, 2013.

cnet.com (Global: 447^th place; English: 345^th place)

news.cnet.com

Farber, Dan (December 29, 2013). "NSA reportedly planted spyware on electronics equipment | Security & Privacy". CNET News. Archived from the original on January 25, 2014. Retrieved January 18, 2014.

computerworld.com (Global: 3,446^th place; English: 2,279^th place)

blogs.computerworld.com

"Secret NSA hackers from TAO Office have been pwning China for nearly 15 years". Computerworld. June 11, 2013. Archived from the original on January 25, 2014. Retrieved January 27, 2014.

cverc.org.cn (Global: low place; English: low place)

"西北工业大学遭美国NSA网络攻击事件调查报告（之一）" (in Chinese). National Computer Virus Emergency Response Center. September 5, 2022. Retrieved May 11, 2025.

dailytech.com (Global: low place; English: low place)

Mick, Jason (December 31, 2013). "Tax and Spy: How the NSA Can Hack Any American, Stores Data 15 Years". DailyTech. Archived from the original on August 24, 2014. Retrieved August 15, 2014.

documentcloud.org (Global: 4,982^nd place; English: 2,747^th place)

s3.documentcloud.org

"What You Wanted to Know" (PDF). documentcloud.org. Retrieved October 3, 2015.

doi.org (Global: 2^nd place; English: 2^nd place)

dx.doi.org

Loleski, Steven (October 18, 2018). "From cold to cyber warriors: the origins and expansion of NSA's Tailored Access Operations (TAO) to Shadow Brokers". Intelligence and National Security. 34 (1): 112–128. doi:10.1080/02684527.2018.1532627. ISSN 0268-4527. S2CID 158068358.

doi.org

Loleski, Steven (October 18, 2018). "From cold to cyber warriors: the origins and expansion of NSA's Tailored Access Operations (TAO) to Shadow Brokers". Intelligence and National Security. 34 (1): 112–128. doi:10.1080/02684527.2018.1532627. ISSN 0268-4527. S2CID 158068358.

eff.org (Global: 4,491^st place; English: 3,102^nd place)

https://www.eff.org/files/2014/04/09/20140312-intercept-the_nsa_and_gchqs_quantumtheory_hacking_tactics.pdf (slide 8)

f-secure.com (Global: low place; English: low place)

"The Equation Group Equals NSA / IRATEMONK". F-Secure Weblog : News from the Lab. February 17, 2015. Retrieved November 24, 2015.

firstlook.org (Global: low place; English: low place)

"The NSA and GCHQ's QUANTUMTHEORY Hacking Tactics". firstlook.org. July 16, 2014. Archived from the original on July 20, 2015. Retrieved July 16, 2014.

foreignpolicy.com (Global: 1,185^th place; English: 815^th place)

Aid, Matthew M. (June 10, 2013). "Inside the NSA's Ultra-Secret China Hacking Group". Foreign Policy. Archived from the original on February 12, 2022. Retrieved June 11, 2013.
Rothkopf, David. "Inside the NSA's Ultra-Secret China Hacking Group". Foreign Policy. Retrieved January 27, 2014.
Aid, Matthew M. (October 15, 2013). "The NSA's New Code Breakers". Foreign Policy. Retrieved July 27, 2023.

inversecos.com (Global: low place; English: low place)

Lina Lau (February 18, 2025). "An inside look at NSA (Equation Group) TTPs from China's lense". Retrieved May 10, 2025.

networkworld.com (Global: 5,743^rd place; English: 3,776^th place)

"British spies reportedly spoofed LinkedIn, Slashdot to target network engineers". Network World. November 11, 2013. Archived from the original on January 15, 2014. Retrieved January 18, 2014.

nytimes.com (Global: 7^th place; English: 7^th place)

Landler, Mark (April 10, 2018). "Thomas Bossert, Trump's Chief Adviser on Homeland Security, Is Forced Out". New York Times. Archived from the original on April 11, 2018. Retrieved March 9, 2022.

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

Kirk, Jeremy (February 17, 2015). "Destroying your hard drive is the only way to stop this super-advanced malware". PCWorld. Retrieved November 24, 2015.

schneier.com (Global: low place; English: low place)

Schneier, Bruce (October 7, 2013). "How the NSA Attacks Tor/Firefox Users With QUANTUM and FOXACID". Schneier.com. Retrieved January 18, 2014.
Schneier, Bruce (January 31, 2014). "IRATEMONK: NSA Exploit of the Day". Schneier on Security. Retrieved November 24, 2015.

securelist.com (Global: low place; English: low place)

GReAT (February 16, 2015). "Equation: The Death Star of Malware Galaxy". Securelist.com. Kaspersky Lab. Retrieved August 16, 2016. SecureList, Costin Raiu (director of Kaspersky Lab's global research and analysis team): "It seems to me Equation Group are the ones with the coolest toys. Every now and then they share them with the Stuxnet group and the Flame group, but they are originally available only to the Equation Group people. Equation Group are definitely the masters, and they are giving the others, maybe, bread crumbs. From time to time they are giving them some goodies to integrate into Stuxnet and Flame."
"Equation Group: Questions and Answers (Version: 1.5)" (PDF). Kaspersky Lab. February 2015. Archived from the original (PDF) on February 17, 2015. Retrieved November 24, 2015.

securityweek.com (Global: low place; English: low place)

Ionut Arghire (February 21, 2025). "How China Pinned University Cyberattacks on NSA Hackers". Security Week. Retrieved May 10, 2025.

semanticscholar.org (Global: 15^th place; English: 8^th place)

api.semanticscholar.org

Loleski, Steven (October 18, 2018). "From cold to cyber warriors: the origins and expansion of NSA's Tailored Access Operations (TAO) to Shadow Brokers". Intelligence and National Security. 34 (1): 112–128. doi:10.1080/02684527.2018.1532627. ISSN 0268-4527. S2CID 158068358.

spiegel.de (Global: 87^th place; English: 363^rd place)

"Quantumtheory: Wie die NSA weltweit Rechner hackt". Der Spiegel. December 30, 2013. Archived from the original on March 23, 2014. Retrieved January 18, 2014.
"NSA-Dokumente: So knackt der Geheimdienst Internetkonten". Der Spiegel. December 30, 2013. Archived from the original on January 16, 2014. Retrieved January 18, 2014.
"Inside TAO: Targeting Mexico". Der Spiegel. December 29, 2013. Archived from the original on January 17, 2014. Retrieved January 18, 2014.
Fotostrecke (December 30, 2013). "QFIRE - die "Vorwärtsverteidigng" der NSA". Der Spiegel. Retrieved January 18, 2014.
"QFIRE - die "Vorwärtsverteidigng" der NSA". Der Spiegel. December 30, 2013. Archived from the original on January 16, 2014. Retrieved January 18, 2014.
"Inside TAO: The NSA's Shadow Network". Der Spiegel. December 29, 2013. Archived from the original on April 20, 2017. Retrieved January 27, 2014.

svt.se (Global: 634^th place; English: 1,155^th place)

"Läs dokumenten om Sverige från Edward Snowden - Uppdrag Granskning". SVT.se. Archived from the original on February 23, 2014. Retrieved January 18, 2014.

tagesanzeiger.ch (Global: 2,180^th place; English: 5,346^th place)

"Hintergrund: Die Speerspitze des amerikanischen Hackings - News Ausland: Amerika". Tages-Anzeiger. tagesanzeiger.ch. Archived from the original on June 21, 2013. Retrieved January 27, 2014.

theatlantic.com (Global: 322^nd place; English: 198^th place)

Schneier, Bruce (October 4, 2013). "How the NSA Thinks About Secrecy and Risk". The Atlantic. Archived from the original on January 10, 2014. Retrieved January 18, 2014.

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

Thomson, Iain (December 31, 2013). "How the NSA hacks PCs, phones, routers, hard disks 'at speed of light': Spy tech catalog leaks". The Register. London. Retrieved August 15, 2014.
Thomson, Iain (August 17, 2016). "Cisco confirms two of the Shadow Brokers' 'NSA' vulns are real". The Register. Retrieved August 19, 2016.
Pauli, Darren (August 24, 2016). "Equation Group exploit hits newer Cisco ASA, Juniper Netscreen". The Register. Retrieved August 30, 2016.

theregister.com (Global: 2,921^st place; English: 1,825^th place)

Thomson, Iain (January 28, 2016). "NSA's top hacking boss explains how to protect your network from his attack squads". The Register. Archived from the original on July 27, 2023. Retrieved July 27, 2023.

usnews.com (Global: 720^th place; English: 417^th place)

Kingsbury, Alex (June 19, 2009). "The Secret History of the National Security Agency". U.S. News & World Report. Archived from the original on July 1, 2016. Retrieved May 22, 2013.
Kingsbury, Alex; Mulrine, Anna (November 18, 2009). "U.S. is Striking Back in the Global Cyberwar". U.S. News & World Report. Archived from the original on July 1, 2016. Retrieved May 22, 2013.

washingtonpost.com (Global: 35^th place; English: 24^th place)

Nakashima, Ellen (December 1, 2017). "NSA employee who worked on hacking tools at home pleads guilty to spy charge". The Washington Post. Archived from the original on April 16, 2021. Retrieved December 4, 2017.
Paterson, Andrea (August 30, 2013). "The NSA has its own team of elite hackers". The Washington Post. Archived from the original on October 19, 2013. Retrieved August 31, 2013.
Gellman, Barton; Nakashima, Ellen (August 30, 2013). "U.S. spy agencies mounted 231 offensive cyber-operations in 2011, documents show". The Washington Post. Retrieved September 7, 2013. Much more often, an implant is coded entirely in software by an NSA group called, Tailored Access Operations (TAO). As its name suggests, TAO builds attack tools that are custom-fitted to their targets. The NSA unit's software engineers would rather tap into networks than individual computers because there are usually many devices on each network. Tailored Access Operations has software templates to break into common brands and models of "routers, switches, and firewalls from multiple product vendor lines," according to one document describing its work.{{cite news}}: CS1 maint: deprecated archival service (link)

web.archive.org (Global: 1^st place; English: 1^st place)

Nakashima, Ellen (December 1, 2017). "NSA employee who worked on hacking tools at home pleads guilty to spy charge". The Washington Post. Archived from the original on April 16, 2021. Retrieved December 4, 2017.
Aid, Matthew M. (June 10, 2013). "Inside the NSA's Ultra-Secret China Hacking Group". Foreign Policy. Archived from the original on February 12, 2022. Retrieved June 11, 2013.
Paterson, Andrea (August 30, 2013). "The NSA has its own team of elite hackers". The Washington Post. Archived from the original on October 19, 2013. Retrieved August 31, 2013.
Kingsbury, Alex (June 19, 2009). "The Secret History of the National Security Agency". U.S. News & World Report. Archived from the original on July 1, 2016. Retrieved May 22, 2013.
Kingsbury, Alex; Mulrine, Anna (November 18, 2009). "U.S. is Striking Back in the Global Cyberwar". U.S. News & World Report. Archived from the original on July 1, 2016. Retrieved May 22, 2013.
Riley, Michael (May 23, 2013). "How the U.S. Government Hacks the World". Bloomberg Businessweek. Archived from the original on May 25, 2013. Retrieved May 23, 2013.
"Secret NSA hackers from TAO Office have been pwning China for nearly 15 years". Computerworld. June 11, 2013. Archived from the original on January 25, 2014. Retrieved January 27, 2014.
"Hintergrund: Die Speerspitze des amerikanischen Hackings - News Ausland: Amerika". Tages-Anzeiger. tagesanzeiger.ch. Archived from the original on June 21, 2013. Retrieved January 27, 2014.
"Inside the NSA's Ultra-Secret Hacking Group". Atlantic Council. June 11, 2013. Archived from the original on October 21, 2020. Retrieved July 27, 2023.
noahmax (February 21, 2005). "Jimmy Carter: Super Spy?". Defense Tech. Archived from the original on February 20, 2014. Retrieved January 27, 2014.
"The NSA and GCHQ's QUANTUMTHEORY Hacking Tactics". firstlook.org. July 16, 2014. Archived from the original on July 20, 2015. Retrieved July 16, 2014.
Landler, Mark (April 10, 2018). "Thomas Bossert, Trump's Chief Adviser on Homeland Security, Is Forced Out". New York Times. Archived from the original on April 11, 2018. Retrieved March 9, 2022.
Thomson, Iain (January 28, 2016). "NSA's top hacking boss explains how to protect your network from his attack squads". The Register. Archived from the original on July 27, 2023. Retrieved July 27, 2023.
"Quantumtheory: Wie die NSA weltweit Rechner hackt". Der Spiegel. December 30, 2013. Archived from the original on March 23, 2014. Retrieved January 18, 2014.
"NSA-Dokumente: So knackt der Geheimdienst Internetkonten". Der Spiegel. December 30, 2013. Archived from the original on January 16, 2014. Retrieved January 18, 2014.
Gallagher, Sean (August 1, 2013). "NSA's Internet taps can find systems to hack, track VPNs and Word docs". Archived from the original on August 4, 2013. Retrieved August 8, 2013.
"Inside TAO: Targeting Mexico". Der Spiegel. December 29, 2013. Archived from the original on January 17, 2014. Retrieved January 18, 2014.
"QFIRE - die "Vorwärtsverteidigng" der NSA". Der Spiegel. December 30, 2013. Archived from the original on January 16, 2014. Retrieved January 18, 2014.
""Chaos Computer Club CCC Presentation" at 28:34". YouTube. Archived from the original on September 9, 2014. Retrieved September 9, 2014.
Mick, Jason (December 31, 2013). "Tax and Spy: How the NSA Can Hack Any American, Stores Data 15 Years". DailyTech. Archived from the original on August 24, 2014. Retrieved August 15, 2014.
"Läs dokumenten om Sverige från Edward Snowden - Uppdrag Granskning". SVT.se. Archived from the original on February 23, 2014. Retrieved January 18, 2014.
"British spies reportedly spoofed LinkedIn, Slashdot to target network engineers". Network World. November 11, 2013. Archived from the original on January 15, 2014. Retrieved January 18, 2014.
"Inside TAO: The NSA's Shadow Network". Der Spiegel. December 29, 2013. Archived from the original on April 20, 2017. Retrieved January 27, 2014.
Farber, Dan (December 29, 2013). "NSA reportedly planted spyware on electronics equipment | Security & Privacy". CNET News. Archived from the original on January 25, 2014. Retrieved January 18, 2014.
Schneier, Bruce (October 4, 2013). "How the NSA Thinks About Secrecy and Risk". The Atlantic. Archived from the original on January 10, 2014. Retrieved January 18, 2014.
Riley, Michael (June 14, 2013). "U.S. Agencies Said to Swap Data With Thousands of Firms". Bloomberg. Archived from the original on January 12, 2015. Retrieved January 18, 2014.
"Equation Group: Questions and Answers (Version: 1.5)" (PDF). Kaspersky Lab. February 2015. Archived from the original (PDF) on February 17, 2015. Retrieved November 24, 2015.

wikileaks.org (Global: 7,389^th place; English: low place)

"What did Equation do wrong, and how can we avoid doing the same?". Vault 7. WikiLeaks. Retrieved March 21, 2017.

wired.com (Global: 254^th place; English: 178^th place)

Weaver, Nicholas (March 28, 2013). "Our Government Has Weaponized the Internet. Here's How They Did It". Wired. Retrieved January 18, 2014.

worldcat.org (Global: 4^th place; English: 4^th place)

search.worldcat.org

Loleski, Steven (October 18, 2018). "From cold to cyber warriors: the origins and expansion of NSA's Tailored Access Operations (TAO) to Shadow Brokers". Intelligence and National Security. 34 (1): 112–128. doi:10.1080/02684527.2018.1532627. ISSN 0268-4527. S2CID 158068358.

youtube.com (Global: 13^th place; English: 14^th place)

""Chaos Computer Club CCC Presentation" at 28:34". YouTube. Archived from the original on September 9, 2014. Retrieved September 9, 2014.

Equation Group (English Wikipedia)

aclu.org (Global: 5,691st place; English: 3,176th place)

arstechnica.com (Global: 473rd place; English: 338th place)

atlanticcouncil.org (Global: 4,417th place; English: 3,354th place)

bloomberg.com (Global: 118th place; English: 85th place)

books.google.com (Global: 3rd place; English: 3rd place)

businessweek.com (Global: 945th place; English: 628th place)

cnet.com (Global: 447th place; English: 345th place)

news.cnet.com

computerworld.com (Global: 3,446th place; English: 2,279th place)

blogs.computerworld.com

cverc.org.cn (Global: low place; English: low place)

dailytech.com (Global: low place; English: low place)

documentcloud.org (Global: 4,982nd place; English: 2,747th place)

s3.documentcloud.org

doi.org (Global: 2nd place; English: 2nd place)

dx.doi.org

doi.org

eff.org (Global: 4,491st place; English: 3,102nd place)

f-secure.com (Global: low place; English: low place)

firstlook.org (Global: low place; English: low place)

foreignpolicy.com (Global: 1,185th place; English: 815th place)

inversecos.com (Global: low place; English: low place)

networkworld.com (Global: 5,743rd place; English: 3,776th place)

nytimes.com (Global: 7th place; English: 7th place)

pcworld.com (Global: 1,889th place; English: 1,323rd place)

schneier.com (Global: low place; English: low place)

securelist.com (Global: low place; English: low place)

securityweek.com (Global: low place; English: low place)

semanticscholar.org (Global: 15th place; English: 8th place)

api.semanticscholar.org

spiegel.de (Global: 87th place; English: 363rd place)

svt.se (Global: 634th place; English: 1,155th place)

tagesanzeiger.ch (Global: 2,180th place; English: 5,346th place)

theatlantic.com (Global: 322nd place; English: 198th place)

theregister.co.uk (Global: 1,877th place; English: 1,233rd place)

theregister.com (Global: 2,921st place; English: 1,825th place)

usnews.com (Global: 720th place; English: 417th place)

washingtonpost.com (Global: 35th place; English: 24th place)

web.archive.org (Global: 1st place; English: 1st place)

wikileaks.org (Global: 7,389th place; English: low place)

wired.com (Global: 254th place; English: 178th place)

worldcat.org (Global: 4th place; English: 4th place)

search.worldcat.org

youtube.com (Global: 13th place; English: 14th place)

aclu.org (Global: 5,691^st place; English: 3,176^th place)

arstechnica.com (Global: 473^rd place; English: 338^th place)

atlanticcouncil.org (Global: 4,417^th place; English: 3,354^th place)

bloomberg.com (Global: 118^th place; English: 85^th place)

books.google.com (Global: 3^rd place; English: 3^rd place)

businessweek.com (Global: 945^th place; English: 628^th place)

cnet.com (Global: 447^th place; English: 345^th place)

computerworld.com (Global: 3,446^th place; English: 2,279^th place)

documentcloud.org (Global: 4,982^nd place; English: 2,747^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

eff.org (Global: 4,491^st place; English: 3,102^nd place)

foreignpolicy.com (Global: 1,185^th place; English: 815^th place)

networkworld.com (Global: 5,743^rd place; English: 3,776^th place)

nytimes.com (Global: 7^th place; English: 7^th place)

pcworld.com (Global: 1,889^th place; English: 1,323^rd place)

semanticscholar.org (Global: 15^th place; English: 8^th place)

spiegel.de (Global: 87^th place; English: 363^rd place)

svt.se (Global: 634^th place; English: 1,155^th place)

tagesanzeiger.ch (Global: 2,180^th place; English: 5,346^th place)

theatlantic.com (Global: 322^nd place; English: 198^th place)

theregister.co.uk (Global: 1,877^th place; English: 1,233^rd place)

theregister.com (Global: 2,921^st place; English: 1,825^th place)

usnews.com (Global: 720^th place; English: 417^th place)

washingtonpost.com (Global: 35^th place; English: 24^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wikileaks.org (Global: 7,389^th place; English: low place)

wired.com (Global: 254^th place; English: 178^th place)

worldcat.org (Global: 4^th place; English: 4^th place)

youtube.com (Global: 13^th place; English: 14^th place)