Thread by @ClimateAudit

THREAD
1/ on June 12, 2016, @JulianAssange announced "upcoming leaks in relation to Hillary Clinton … We have emails pending publication". This announcement is believed by many to have precipitated DNC's announcement of hack (via WaPo and Crowdstrike)
theguardian.com/media/2016/jun…

2/ however, there was relevant incident on June 8, thus far unnoticed in this respect. On June 8, DCLeaks published web.archive.org/web/2016061314… several archives, one of which was entitled "HILLARY CLINTON ELECTION STAFF CLIPS".

3/ the Hillary Clips dossier published on June 8, 2016 at DCLeaks consisted of 72 documents with nomenclature like 20150127 HRC Clips.docx, ...etc
web.archive.org/web/2016062020…

4/ ALL 72 documents had been attachments to Podesta emails (published in October 2016 by Wikileaks wikileaks.org/podesta-emails/), a connection which (to my knowledge tho somebody might have) has not been reported.

5/ the distribution lists on emails were senior insiders of Hillary campaign: from Nick Merrill to Podesta, Mook, Huma, Cheryl Mills etc, rather than DNC finance officials of the DNC hack archive.

6/ so Hillary campaign officials knew or ought to have known that there had been a hack of someone in the Hillary campaign - DISTINCT from the DNC hack which Crowdstrike was consulting on.

7/ the person who'd been hacked was therefore a senior insider of the Hillary campaign, not a low-level DNC clerk. At the time, the Hillary email investigation was ongoing, with both FBI and Hillary covering up or denying that Hillary email had been hacked.

8/ I wonder what the Hillary campaign told Crowdstrike. I'll bet that they kept their mouths shut and hoped that it would be contained until after the election.

9/ in any event, seven days before Guccifer 2, DCLeaks had published the first fruits of the Podesta hack.

10/ in the Guccifer2 blogposts in June 2016 - as is now well known, many of the documents had originated as attachments to Podesta emails. (One particular document can be distinguished in version from a similar document at DNC).

11/ 11 documents in Guccifer2 blogposts of June 30 and July 6 also occur as attachments in DNC hack emails. This is little known. I just noticed this. I subsequently noticed that Forensicator SI has similar collation, but didn't discuss.

12/ in my opinion, Guccifer2 blog use of Podesta attachments was a much firmer association than any presented in intel assessments. G2 use of DNC attachments (prior to Wikileaks publication) is a similarly firm association.

13/ I've consistently spoken against any reliance on high July 5 copying speeds as supposedly showing a leak rather than hack. (July 5 copying was a re-arrangement by G2 - NOT exfiltration.) G2 use of DNC attachments on June 30 is further evidence against the July 5 theory.

14/ the spearphishing syntax of Podesta hack, as I've mentioned before, was identical to spearphishing syntax of Rinehart hack published at DCLeaks. So there's a direct connection between Podesta hack and DCLeaks as well as to Guccifer2.

15/ there are also connections between DCLeaks and Cyber-Berkut. Several Soros documents published by Cyber-Berkut were among the Soros documents published by DCLeaks. (Citizen Lab used DCLeaks version to accuse CyberBerkut of altering a document.)

16/ DCLeaks' earliest archives (to which little attention has been paid) are hacks of US military, most prominently NATO General Philip Breedlove, whose very aggressive emails on Ukraine situation attracted some interest in Europe.

17/ One of Breedlove's most prominent correspondents - Wesley Clark - advocated a Strangelove-like domino theory of the type not heard since escalation of Vietnam War.

18/ in passing, there were an astonishing number of US military personnel, including Gen. Breedlove, who used gmail, aol etc for correspondence on military policy. If US military use gmail to talk shop, how can US complain if they get hacked by Russia or anyone else?

19/ also, in passing about DCLeaks, their email hacks didn't involve X-Agent, X-Tunnel or elaborate malware. They involved nothing more than a single spearphish email, no different than Nigerian scam. DCLeaks published 13 hacks, with latest (Colin Powell) having emails to Aug 29

20/ more later.