WikiLeaks has released the latest Vault 7 batch of CIA hacking
exploits. ‘ELSA’ is malware used to track WiFi-enabled devices running
Microsoft Windows, allowing the CIA to gather location data on a
target’s device and monitor their patterns and habits.
ELSA tracks the geolocation of wifi-enabled devices, providing the CIA with a target’s “pattern of life,” by recording details about wifi access points near the target machine.
The
malware allows the CIA to track a target’s location even when they’re
not connected to the internet. All that’s needed is for the device to be
wifi-enabled and in an area where wifi access points are in range.
Using wifi for geolocation means GPS isn’t required.
ELSA was initially created in 2012, according to a 2013 user manual obtained by WikiLeaks. The manual is marked as ‘secret, noforn’ - meaning it’s not to be shared with other countries.