Grasshopper

27 documents on the CIA's Grasshopper framework, which WikiLeaks described as a platform for building customised malware payloads for Microsoft Windows from modules, with rules for surveying a target before installation. WikiLeaks highlighted that one persistence module, 'Stolen Goods', took components from the Carberp malware, according to the documents.