Missed this last night, but apparently U.S. Cyber Command was behind the recent temporary disruption in the massive Trickbot botnet, which officials worry could be used to lock up election offices with ransomware. washingtonpost.com/national-secur… 
Microsoft has won a court order giving it control of domain names associated with the Trickbot ransomware. The company has disabled the servers that let the malware's operators infect new computers. blogs.microsoft.com/on-the-issues/…
Ransomware affecting election systems is one of U.S. officials' biggest concerns right now.
Microsoft execs told NYT that "they had carefully timed their operations to put Russian cybercriminals on their heels weeks before the election."
nytimes.com/2020/10/12/us/…
Microsoft execs told NYT that "they had carefully timed their operations to put Russian cybercriminals on their heels weeks before the election."
nytimes.com/2020/10/12/us/…
Microsoft worked with Symantec, ESET, and other partners to disable Trickbot's infrastructure.
More details here:
symantec-enterprise-blogs.security.com/blogs/threat-i…
eset.com/int/about/news…
blog.lumen.com/a-look-inside-…
More details here:
symantec-enterprise-blogs.security.com/blogs/threat-i…
eset.com/int/about/news…
blog.lumen.com/a-look-inside-…
Microsoft's security team has posted its own technical breakdown of the operation here: microsoft.com/security/blog/…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
