Thread by @N0rth0ftheW4ll

Something that should shock no one, Russian hackers are selling voter registration DBs on the darkweb. At least MI, FL, NC, CT & AR so far. It should be noted all major political campaigns already have all of this data & its fairly easy to acquire it. meduza.io/amp/en/feature…

What is more shocking is that our own State Department appears to have known about this for some undetermined amount of time (possibly all the way back to March) & paid a bug bounty to some of the associates of the Hackers 4 letting the State Depart know.

One hacker bragged that he got paid $4000 from our State Department. All eye-rolling aside, it is worth determining if hackers got it from hacking directly into state voter roles. Seems doubtful, as this kind of access would not be advertised on a forum. But thats the REAL danger

Here is the statement from the Michigan Secretary of State this morning. Confirm this data is not particularly hard to get via the non-hacking route #infosec #osint

And here are just some of the incredibly bad takes here in the US on this information (again publicly available databases) that seems to have come out in Russian media late last night (US time). Maybe that is even part of the point ... #Elections2020

Again this appears to be incredibly UNSOPHISTICATED & probably not even a hack. I could probably purchase these datasets directly from the states in question 4 less than a total of $300. Clearly more details are needed & no one should let their guard down #elections2020 #infosec