(TS//SI//REL) GODSURGE runs on the FLUXBABBITT hardware implant and provides software application persistence on Dell PowerEdge servers by exploiting the JTAG debugging interface of the server’s processors.
(TS//SI//REL) FLUXBABBITT Hardware Implant for PowerEdge 2950
(TS//SI//REL) FLUXBABBITT Hardware Implant for PowerEdge 1950
(TS//SI//REL) This technique supports Dell PowerEdge 1950 and 2950 servers that use the Xeon 5100 and 5300 processor families.
(TS//SI//REL) Through interdiction, the JTAG scan chain must be reconnected on the target system by removing the motherboard from the chassis and attaching the depopulated parts back onto the circuit board. After this step is complete, the hardware impant itself must be attached to the motherboard. The implants should already be programmed with the GODSURGE application code and its payload , the implant installer. Once implanted, GODSURGE’s frequency of execution (dropping the payload) is configurable and will occur when the target maching powers on.

Status: Released / Deployed. Ready for Immediate Delivery
Unit Cost: $500 for Hardware and Installation

Thank you for taking the time to read this article! As always keep the faith!
The NSA’s original documentation on GODSURGE

The following two tabs change content below.

• Bio
• Latest Posts

Preston Hood

Owner at PJHoodsCo

Hello, my name is Preston Hood. I am the owner of PJHoodsCo, an Information Technology Service Provider (ITSP). I am also a freelance writer and information security researcher.

Latest posts by Preston Hood (see all)

• Information Security in Our World Today - 03/26/2015
• 49 Ways the NSA Can Spy On You - 01/30/2015
• NSA Device – STUCCOMONTANA - 01/27/2015
• NSA Device – PICASSO - 01/26/2015
• NSA Device – IRONCHEF - 01/23/2015