Feared DNC hack was actually a security test

[DonViejo]

Source: Axios



Joe Uchill 11 mins ago

The DNC walked back an assertion that it had detected a "sophisticated" hacking attempt early Thursday, announcing instead that it was simply a subcontractor's unauthorized security test.

Why it matters: While this is a slight black eye for the DNC, who look a little foolish for riling up the press over what turned out to be an internal matter, it's a massive victory for Lookout, the third-party security firm that caught the "attempt" with its unique approach to discovering phishing sites.

What actually happened:

The DNC uses the contractor NGP VAN to manage its digital voter operations — specifically, a product known as VoteBuilder.

Lookout discovered what appeared to be a newly-registered phishing site meant to look like the NGP VAN site and alerted several stakeholders.

Read more: https://www.axios.com/dnc-hacking-phishing-security-test-lookout-5db16d25-4e9b-4194-b0d7-3dd6e3573e5a.html

[Roy Rolling]

1. It's a hack

An unauthorized phishing security test outside of any website operator's scope is a security violation. If the DNC allows this, the are giving the keys to their online identity to the wrong people.

[forgotmylogin]

2. "It was only test of Big Beautiful American Secuirty Systems"

"Please for to go back to how you were doing, all is normal here."

[WhiteTara]

3. Good to see their IT was on top of this

no matter what they call it.

[still_one]

4. That is bullshit, and the contractor needs to be let go