Microsoft COFEE Leaks Onto Bit Torrent Sites -- Redmondmag.com

Microsoft Tries To Clean Up COFEE Spill

By Kurt Mackie
11/10/2009

Someone spilled hot COFEE, otherwise known as Microsoft's Computer Online Forensic Evidence Extractor.

The spill or leak was noted on Monday in reports from CrunchGear and Ars Technica. COFEE is a computer forensics solution that Microsoft provides for free to law enforcement agencies. It's really a collection of tools packaged together on a thumb drive for easy use by police on the scene of a crime or cybercrime.

Now, the software has somehow become expropriated, and it's found its way onto bit torrent sites.

Essentially, COFEE is now openly distributed as pirated software. The distribution was supposed to have been controlled through the National White Collar Crime Center or INTERPOL.

Microsoft confirmed the leak on Tuesday, stating that it plans to "mitigate unauthorized distribution of our technology beyond the means for which it's been legally provided," according to a statement from Richard Boscovich, senior attorney for Internet safety at Microsoft Corp. He discouraged people from downloading pirated COFEE software -- not just because it's an unauthorized distribution, but because the copies could have been modified.

Boscovich debunked the idea that pirates can now use the pirated COFEE software to "build around" its use by law enforcement agencies.

"Its value for law enforcement is not in secret functionality unknown to cybercriminals," Boscovich stated. "Its value is in the way COFEE brings those tools together in a simple and customizable format for law enforcement use in the field."

It's also possible that cyber crooks could use COFEE in the same way that law enforcement agencies do -- to glean information from people's computers. That point wasn't addressed in Boscovich's statement.

Microsoft claims that law enforcement officers can learn to use COFEE in about 10 minutes. COFEE can run "more than 150 commands on a live computer system," according to a Microsoft government Web page. It's designed to capture information before a computer system is powered down and some information is lost.

Microsoft's Web page states that COFEE is designed to help law enforcement "in their fight against cybercrime, child pornography, online fraud, and other computer-facilitated crimes."

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Using Configuration Files to Control PowerShell Scripts, Part 2: Building Blocks

Learn how to use PowerShell's GUI capabilities to dynamically create configuration files that enhance script flexibility and usability.
U.S. House Leaders Unveil Bipartisan Strategy for AI Governance and Innovation

On Tuesday, U.S. House Speaker Mike Johnson and Democratic Leader Hakeem Jeffries received the final report from the bipartisan House Task Force on Artificial Intelligence, which outlines essential principles and recommendations to bolster American leadership in AI.
Using Configuration Files to Control PowerShell Scripts, Part 1: The Basics

Learn how to use JSON configuration files to make PowerShell scripts more dynamic, flexible and user-friendly.
Exchange Online Receiving Enhanced Message Trace

Microsoft has announced the public preview of its enhanced Message Trace feature in the Exchange admin center (EAC) for Exchange Online.
Major Microsoft Multifactor Authentication Vulnerability Revealed

A vulnerability in Microsoft’s multifactor authentication (MFA) system has been uncovered by cybersecurity firm Oasis Security, allowing attackers to bypass security measures and access sensitive data across services including Outlook, OneDrive, Teams and Azure.