Thread by @SlickRockWeb

In Republican Devin Nunes opening statement, he chose to peddle the insane conspiracy theory that Ukraine helped Hillary lose the election to later then have the ability to smear Trump after he won and pin it on Russia (Say What??) #ImpeachmentHearings #ImpeachmentDay

Rep. Devin Nunes also attacked @AlexandraChalup and (as Democratic stooges) witnesses Amb. Bill Taylor and State Dept's George Kent highly respected professionals who have served numerous presidents of BOTH parties with distinction. #ImpeachmentHearings #ImpeachmentDay

I will remind everyone that while Devin Nunes was the Chairman of the Intelligence Committee of the United States in 2017 we & others alerted him 2 the fact that one of his past campaign websites was breached and infected with Russian SEO spam #ImpeachmentHearings #ImpeachmentDay

Our report about Devin Nunes Russian cyberattack problem in 2016-2017 and the lack of preparedness in general to combat Russian cyberwar at the time was written up here #malware #infosec #osint #ImpeachmentHearings #ImpeachmentDay slickrockweb.com/devin-nunes-ru…

Bleepingcomputer @campuscodi in January 30, 2018 followed up on the Rep. Devin Nunes Russian hack with this article referencing the hack we found back in May 2017 ... bottomline the site was still infected #malware #infosec #ImpeachmentHearings

https://twitter.com/SlickRockWeb/status/958754430370877441

"Webmaster forgetfulness" might apply to a family reunion blog but Devin Nunes who handles our Nation's most sensitive classified info? Call me old-fashioned but I kinda expect better than this. Looks like much of the wordpress install is still in place #malware #infosec #osint

We have new evidence from Archive(.)org showing that the Rep. Devin Nunes campaign website was infected / breached longer than previously known and since at least October 2016 prior to the Presidential election. #malware #infosec #osint #ImpeachmentHearings #ImpeachmentDay

In July 2017 we tested the Webshell we strongly suspect was inserted into the Devin Nunes website & we found that the Sindbad WebShell at the time (Jul 2017) was NOT identifiable by any of current malware scanners #malware #infosec #osint

And there is this interesting nugget related to the Devin Nunes hack that i will try to touch on shortly

https://twitter.com/brazencapital/status/974065923194740736

Within the public facing HTML code of the Devin Nunes website hack there were 3 different redirector domains used within this Russian spam hacking campaign. #malware #infosec #osint #ImpeachmentHearings #ImpeachmentDay

An interesting development related to the Devin Nunes hack occurred in July 2017 when news of a Latvian / Russian hacker named Jurijs Martisevs began to surface. In the indictment he also went by the name Yury Martyshev #infosec #osint #ImpeachmentHearings bleepingcomputer.com/news/security/…

The anonymous registration of the redirector tdskakts(.)com domain linked to the Nunes hacking campaign appeared to get exposed in July 2017... possibly as a result of Yury getting arrested. This domain was registered 2 a Yury Martyshev residing in Moscow Russia #malware #infosec

Yury Martyshev (alias) or Jurijs Martisevs was involved with running a dark web site that was designed 2 let hackers test their malware. The Kremlin denounced his arrest as "another case of kidnapping of a Russian citizen by the US" by @kpoulsen #infosec thedailybeast.com/russian-nation…

Its not clear if someone else was just using part of Yury's redirector infrastructure and whether Yury was aware or unaware of the hack on the Rep. Devin Nunes campaign website prior to the 2016 Presidential election #malware #infosec #osint #ImpeachmentHearings #ImpeachmentDay

Our friends at RiskIQ provided this data pivot point on Yury Martyshev & some of his other registered domains. Have fun #OSINT sleuths. Now is a good time to plug @RiskIQ & @ydklijnsma. Its a fantastic threat assessment & intelligence tool #infosec #opsec

https://twitter.com/ydklijnsma/status/1194741059906965504