Before I write an explainer/debunker on this Crowdstrike/Ukraine tie, is there already a good explainer on this that I should just point to instead? Conversely, what questions do you have that I should address?
CrowdStrike is the company that investigated the DNC hacks getting emails. CrowdStrike concluded "the Russians did it'. The DNC hack is part of the Mueller report, as it ties into Trumps speech on the campaign trail "Hey Russian hackers, please get Hillary's emails".
QED: pro-Trump conspiracy theorists therefore look for ways to cast doubt on CrowdStrike. One conspiracy theory looks at the file transfer rates in a ZIP file, which I debunk here:
blog.erratasec.com/2017/08/why-th…
blog.erratasec.com/2017/08/why-th…
Another conspiracy theory is how CrowdStrike prevented the FBI from looking at the servers, as part of some coverup. I should write an explainer/debunker for this. The tl;dr is that this is appears normal data breach forensics, with nothing unusual here.
Another conspiracy is that there is Ukraine ownership of CrowdStrike, some missing servers in Ukraine, and so on. The Ukraine angle is important because Ukraine is enemies of Russia, so is part of an entire anti-Russian conspiracy.
I don't know about any financial ties, but I'm familiar with eastern European hacking. You'll often see Russian hackers operating from Ukraine hosting services. To pro-Trump conspiracy theorists, this can appear "significant". It's not.
CrowdStrike does lots of investigations involving Ukraine, simply because Ukraine is the biggest target of Russian hackers, whether it's that hacked artillery story, or notPetya worm. Every cybersecurity company is involved in investigating Russian hacker attacks in Ukraine.
