Russia's Election Hackers Are Back--and Targeting George Soros

[babylonsister]

ENCORE PERFORMANCE
Russia’s Election Hackers Are Back—and Targeting George Soros
The Kremlin’s targeting of George Soros and his organization carries echoes of 2016, when the GRU dumped 2,500 files stolen from the Open Society Foundations.
Kevin Poulsen, Sr. National Security Correspondent
Updated 07.15.19 6:56AM ET / Published 07.15.19 5:21AM ET


The Russian intelligence agency behind 2016’s election attacks is training its sights on billionaire financier George Soros, The Daily Beast has learned. The move comes hot on the heels of a surge in U.S.-focused hacking by Russia’s Main Intelligence Directorate with similarities to 2016 in targeting and methodology.

Laura Silber, chief communications officer for Soros’ Open Society Foundations, confirmed the hack attempt, but couldn’t provide additional details over the weekend. “We were aware of an attack,” Silber told the Daily Beast.

Last month Microsoft quietly seized a new batch of 10 deceptive domain names the company says were set up by the hackers known as Fancy Bear, the group intelligence officials and independent analysts have long attributed to Russia’s Main Intelligence Directorate, the GRU. Those web addresses imitate genuine domains used for Microsoft services like Sharepoint, an unmistakable sign that they were intended for use in phishing attacks, in which a victim is tricked into typing their password into a fake login page.

One domain targets a Singapore-based investment firm, and another references the Berlin anti-corruption organization Transparency International, which Russia has targeted before. Others are generic or ambiguous in their targeting. But one seized domain, soros-my-sharepoint[.]com, jumps out as a clear reference to Soros, a past GRU target from Russia’s 2016 election interference.

An additional four phishing domains registered in the same time frame appear to target Soros’ Open Society Foundations, said Kyle Ehmke, an intelligence researcher at the Arlington, Virginia-based cybersecurity firm ThreatConnect. Those domains haven’t been seized and ThreatConnect hasn’t found enough evidence to definitively link them to the Russian hackers, said Ehmke.

more...

https://www.thedailybeast.com/russias-election-hackers-are-backand-targeting-george-soros-and-his-open-society-foundations?ref=home2

[Initech]

1. No collusion? Ha!!!

There's collusion happening all around us! And Russia is not sending us their best people. They're rapists, they're criminals, and some I assume, are good people.

[backscatter712]

2. Of course! Anti-semitism is a big seller for the smoothbrained chuds.