A reader writes, “According to last week’s Shadow Brokers leak, the NSA compromised a DNS server of the Hague-based Organization for the Prohibition of Chemical Weapons in September 2000, two years after the Iraq Liberation Act and Operation Desert Fox, but before the Bush election.”
“News articles on this leak do not mention the hack of an international disarmament organization that works with the UN (except one tweet by @spyblog), just that many of the compromised servers belong to universities or are in China.”
Technical sources:
1. https://twitter.com/musalbas/status/793001139310559232
See second-to-last line. (@snowden retweeted this.)opcwdns.opcw.nl___195.193.177.150
2. http://www.networkworld.com/article/3137065/security/shadow-brokers-leak-list-of-nsa-targets-and-compromised-servers.html
See link to spreadsheet by Matt Swann. Note timestamp of September 9, 2000.Hostname: opcwdns.opcw.nl
IP: 195.193.177.150
OS: sparc-sun-solaris2.6
Timestamp: 20000906-160642
Tools: jackladder3. https://www.sidn.nl/?language_id=2
Because opcw.nl no longer resolves, search for opcw.nl in the Dutch domain
registry to confirm that OPCW has owned it since 1994.Domain name: opcw.nl
Status: active
Registrant: Organisation for the Prohibition of Chemical Weapons (Prep. Comm.)
Administrative contact: postmaster@opcw.nl
Registrar: Verizon Nederland B.V.
H.J.E. Wenckebachweg 123
1096AM AMSTERDAM
Netherlands
Technical contact(s): postmaster@opcw.nl
DNSSEC: no
Domain nameservers: ns.nl.net
opcwdns.opcw.org
Creation Date: 1994-04-10
Updated Date: 2010-03-15
Record maintained by: NL Domain Registry