Profile picture
The_War_Economy @The_War_Economy
, 3 tweets, 2 min read Read on Twitter
On June 26, 2016, Secureworks published "Threat Group-4127 Targets Google Accounts", which was about their efforts tracking Fancy Bear / APT28 / Sofact / Sednit / Pawn Storm, and how they did phishing campaigns with bitly URL-shortening links.

secureworks.com/research/threa…
On June 16, 2016, Secureworks published "Threat Group-4127 Targets Hillary Clinton Presidential Campaign".

secureworks.com/research/threa…
Secureworks' Counter Threat Unit (CTU) apparently started analysing 8,909 Bitly links between October 2015 and May 2016, which targeted 3,907 Gmail accounts, which targeted people in Russia, military, defense personnel, authors, journalists, DNC.

secureworks.com/research/threa…
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to The_War_Economy
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

More from @The_War_Economy see all

Profile picture
On December 31, 2018, Josh Gerstein at Politico published the article "Suspect's Twitter messages played role in NSA hacking-tools leak probe".

politico.com/story/2018/12/…
"Messages that the former NSA computer security specialist, Hal Martin, sent via Twitter appear to have led to an FBI raid on his Maryland home and to his arrest on charges of retaining a vast trove of classified information there without permission."

politico.com/story/2018/12/…
For reference, Harold T. Martin III was arrested on August 27, 2016 after the Shadow Brokers initiated a hunt within the National Security Agency, where they found 16 years worth of classified information.

nytimes.com/2016/10/20/us/…

nytimes.com/2016/10/07/us/…
Read 35 tweets
Profile picture
Since @jimsciutto doesn't understand that Christopher Steele was hired in June 2016 and the contract between Fusion GPS and Free Beacon ended before then, and that the first memo was written for June 20, 2016, I will explain it:

Christopher Steele was hired to write the dossier.
The fact that @CNN and @jimsciutto keep saying that Republicans funded the dossier would join with @Comey's idea that Republicans funded the dossier, which is completely incorrect.
You know, it's not the first time @jimsciutto has claimed that parts of the dossier have been verified. This was back in February 2017 though. I wonder who his source is?

Read 3 tweets
Profile picture
"The DNC had several meetings with representatives of the FBI's Cyber Division and its Washington Field Office, the DOJ's National Security Division, and US Attorney's Offices, and it responded to a variety of requests for cooperation..."
"... but the FBI never requested access to the DNC's computer servers", Eric Walker, the DNC's deputy communications director, told BuzzFeed News in an email.

Quote is from Ali Watkins' BuzzFeed News article from January 4, 2017, "The FBI Never Asked For Access To Hacked Computer Servers".

buzzfeednews.com/article/alimwa…
Read 4 tweets

Related threads

Profile picture
Unpopular opinion of the day: #phishing awareness campaigns and teaching your users to stay frosty is a close to useless endeavour. A waste of resources. Read on to see my point (1/n) /cc @troyhunt @randomdross @sirdarckcat
I know anti-phishing is a business that feeds a lot of people but the way this war is fought today just seems off to me.
First, I differentiate targeted phishing campaigns (usually APTs) from massive or moderately massive phishing. I don't think I need to point out why you can't fight the former with awareness.
Read 27 tweets
Profile picture
I wrote a piece about #phishing adverts on @Twitter a couple of weeks ago. @TwitterSupport had put it about that they had it under control. Here’s the article...

link.medium.com/UXh4iZtCMR

#security #digitaladvertising
Incredibly, it’s still going on. This is a #safety and #privacy issue that is not being addressed by @TwitterSupport.

This time @capgemini_aust are the main target and it is EXACTLY the same promoted advert that I highlighted in my article. link.medium.com/UXh4iZtCMR
The accounts used to legitimise the #scam this time are

@BenAllenCA @azariarachel @ARTNIGHTLDN @AKIpress_com and @67Kelechi.

Once again, all of them are @verified accounts. And this is still live over half an hour after it was posted.

#security #privacy
Read 5 tweets
Profile picture
It’s Time Twitter Cleaned Up The #Phishing Ads

I’ve just written this. I’m passionate about Twitter - always have been. I love how it is tackling fake accounts and hoping to reduce the amount of extremism online. But these adverts should be a priority.

link.medium.com/gCqRV3BVAR
Today’s scam has roped in @patheuk, @swansladies, @sarahscoop, @angola2411, @bookmyshow_sup - last time it was @monsterjobs, @GeoffroyDidier, @wsu_womensgolf, @CarteNoireUK and @rpsgmavericks - all without their knowledge and all trying to scam people out of their #bitcoin.
Each of the accounts used in the scams are @verified and, last time this happened, I copied in @TwitterSupport so they knew it was happening. It looks like it takes about 30 mins-1 hour to take down these scams but that is long and the damage to innocent accounts lasts longer.
Read 5 tweets
Profile picture
#Google takes the blame for #Aadhaar #UIDAI fiasco, while @UIDAI acts innocent! #UIDAImystery @google gadgets.ndtv.com/mobiles/news/u…
. @UIDAI claimed that 'It is clarified that, #UIDAI has not asked or communicated to any manufacturer or service provider for providing any such facility whatsoever'
#Google has assured its fix in the next few weeks! If you are wondering how #iPhone users reported the no. showing up in their contacts, it's likely coz they synced their contacts with a #Gmail account that already had the said contact added to its list #UIDAImystery
Read 3 tweets
Profile picture
Exclusive: A day in the life of “Den Katenberg,” alleged GRU hacker apnews.com/c554ea59bd0b4e…
Something that I've been working on quietly but which the indictment probably makes moot: the Secureworks list had several Fancy Bear email addresses which the group used for self-testing.
How I found this out: Fancy Bear generated malicious links in batches. But between these waves of activity they would sometimes generate 1-4 malicious links, often connected to weird-sounding email addresses.

Here's Fancy's bitly activity for March 4, 2016, for example:
Read 16 tweets
Profile picture
Recall, Trump’s Baku hotel was a money laundering front for the Iranian Revolutionary Guard. ✌🏼
2/ Trump Baku money laundering scheme with Iran Revolutionary Guard:
3/
Read 33 tweets

Trending hashtags

#Google #Phishing #dcleaks #CrookedHillary #Trump2016 #socialmedia #digitaladvertising #Hillary #phishing #jerks #BlueGold #Russia #Midterms2018 #NutShellReport #Clinton #HisNameWasSethRich #LockThemUp #BGP #RussianMob #safety #advertising #China #UIDAI #SethRich #USVIA

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member and get exclusive features!

Premium member ($3.00/month or $30.00/year)

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!