1. SolarWinds - an IT monitoring company with the NSA, all five military branches of the Pentagon, and several major civilian agencies, had their software hacked by the Russian hacker group Cozy Bear yesterday, the same group responsible for the 2016 DNC hack.
2. SolarWinds uses a protocol called Orion Improvement Protocol (I believe this is a wrapper for RMON and SNMP calls), and this protocol was hacked at Treasury and NTIA, the National Telecommunication advisor agency.
3. As a veteran of hacking forensics, I always look at modus operandi by malicious groups and at human factor compromises as the first investigative avenues to pursue. My research partner Jen Moore discovered Pavel Yershov lead the 2016 attack for GRU also worked for Microsoft.
4. Interesting that Warren Flood also works for Microsoft Pro Services, and he was intimately involved in the 2016 DNC Microsoft GRU "Hack". Flood and his wife were instrumental in the Dominion Voting Machine purchases in Wayne County, Michigan and the State of Georgia,
5. Even more interesting that Warren Flood has worked for a long time for Joe Biden as has his wife.
6. We have also tracked two GRU hackers, Krylova and Bogacheva, to a safe house in Novi, Michigan, and Ypsilanti through a Kelly Service handler named Paul Whelan, a man convicted of espionage in Russia.
7. A Ukrainian Hacker named Nataliia Sova was also involved in the Washington, DC area providing safe houses for Eastern European hackers in 2012, and she was married to a member of the Awan Spy Ring on Capitol Hill for the 2016 DNC "Hack".
8. Also, Peter Strzok's favorite Russian spy handler, Patrick Byrne, arranged meetings between Russian femme fatale Maria Butina and Stanley Fisher, a high-level official at the hacked agency. FBI LURES can use extracting thumb drives to steal passwords from top exec laptops.
9. Would it not make sense to see which known GRU agents have hacked before, and to study their DNC connections. Physical access is usually the most difficult part of hacking. Butina "met" with John Rockefeller IV and Hank Greenberg also in DC, both known to maintain DC spy nets
10. And Butina transferred over 12 Terabytes to Moscow for a Treasury transactions to her Russian Central Bank Exec Alex Torshin. Sound like a hack to you? And Patrick Byrne, her handler, specializes in encrypted, blockchain financial transactions.
11. Is Strzok moping up his 2016 hacks now with a covering hack in 2020. Same Cozy Bears. Same IP addresses. Same DNC operatives. Same safe houses. Same handlers. You Decide. Just a continuation of a four-year Russian Hoax?
Share this Scrolly Tale with your friends.
A Scrolly Tale is a new way to read Twitter threads with a more visually immersive experience.
Discover more beautiful Scrolly Tales like this.