Microsoft claims win over 'Russian political hackers'

[bychemist32]

Russian attempts to launch cyber-attacks against US conservative groups have been thwarted, Microsoft says.

The software company said Russian hackers had tried to steal data from political organisations, including the International Republican Institute and the Hudson Institute think tanks.

But they had been thwarted when its security staff had won control of six net domains mimicking their websites.

Microsoft said the Fancy Bear hacking group had been behind the attacks.

Domain control

"We're concerned that these and other attempts pose security threats to a broadening array of groups connected with both American political parties in the run-up to the 2018 elections," Microsoft said in its blog detailing its work.

The thwarted attack was likely the start of a "spear phishing" campaign, said Microsoft. This would involve tricking people into visiting the mimicked domains allowing the Fancy Bear group to see and steal login information that people use.

As well as the two think-tanks, the domains seized were associated with several Senate offices and services. One domain sought to mimic Microsoft's Office 365 online service.

Hunt wants 'malign' Russia to face action
Trump relaxes rules around cyber-attacks
US accuses Russia of 'pervasive' meddling

The New York Times suggested that the two think tanks were targeted because they were former supporters of President Trump but were now foes who had called for more sanctions to be imposed on Russia.

The International Republican Institute's directors include Senator John McCain and General HR McMaster who was replaced earlier this year as the White House national security adviser.

IRI president Daniel Twining told the Times that the attacks were consistent with the "campaign of meddling" the Kremlin is known to have indulged in.

In its blog, Microsoft president Brad Smith said it had grabbed dodgy domains 12 times in two years to shut down 84 websites associated with Fancy Bear.

It said that, so far, it had no evidence that the domains had been used in any attacks.

Microsoft added that the attack activity seen around the domains "mirrors" what it saw in 2016 in the US and during the 2017 election in France.

Microsoft's action comes soon after the US charged 12 Russian intelligence officers with hacking computer networks used by Hillary Clinton and the Democratic Party.

Russia has consistently denied meddling in the elections or mounting any cyber-attacks on US institutions.

source:https://www.bbc.com/news/technology-45257081

[lepbagong]

we must recognize that in the election of heads of government not only in superpowers, but in countries directly related to trade in large countries where there is mutual benefit, there will certainly be a movement to intervene through expertise in data hacking.

however, it is in the interests of large countries to participate in the intervention because they need security from assets in the country which is holding an election for the country's leaders.
then all data will be prepared to help ensure that the security of large state assets is not interrupted, so that those who wish to be selected can be invited to work together at least not to interfere with trade affairs later.

this has already happened in several countries and is likely to continue to occur because after all the interests of large state assets will not be disturbed and can run normally. Likewise, a large country would certainly do the same thing, but maybe just a difference in mission.