Fancy Bear hackers have targeted the email accounts of Democratic state parties in California and Indiana, as well as think tanks in Washington and New York, according to investigators. But it appears this time, they were not successful. legalreader.com/russian-hacker…
U.S. Cybersecurity Firm FireEye Hit By 'Nation-State' Attack, Russia Suspected rferl.org/a/u-s-cybersec…
FireEye has tracked Apt28 aka Fancy Bear aka the GRU extensively 
https://twitter.com/trickfreee/status/865922371374391300
Norway: Russian APT28 state hackers likely behind Parliament attack bleepingcomputer.com/news/security/…
WaPo reported that the suspect in the FireEye hack is specifically Russia’s other intelligence agency, the SVR aka Apt29 aka Cozy Bear wired.com/story/russia-f…
US Treasury reportedly breached by APT 29 aka Cozy Bear aka Russian SVR
https://twitter.com/trickfreee/status/1338229003186888704
The Russian government hackers who breached FireEye are behind a global espionage campaign that also compromised the Treasury and Commerce departments and other government agencies washingtonpost.com/national-secur…
Hackers broke into the NTIA’s office software, Microsoft’s Office 365. Staff emails at the agency were monitored by the hackers for months, sources said, by surreptitiously tampering with updates released by IT company SolarWinds
reuters.com/article/us-usa…
reuters.com/article/us-usa…
This rogue version of SolarWinds Orion plug-in allows HTTP communication to remote servers allowing retrieval & execution of malicious commands- including transferring & executing files, profiling & rebooting the target system, & disabling system services. thehackernews.com/2020/12/us-age…
DHS confirmed to be a victim of the SolarWinds hack washingtonpost.com/national-secur…
Cybersecurity giant FireEye on Wednesday said that it had worked with Microsoft and the domain registrar GoDaddy to take over one of the domains that attackers had used to send malicious code to victim machines. cyberscoop.com/fireeye-micros…
Microsoft was hacked as part of the suspected Russian campaign that has hit multiple U.S. government agencies by taking advantage of the widespread use of software from SolarWinds Corp, according to people familiar with the matter. reuters.com/article/global…
DOE confirmed as victim of SolarWinds hack nbcnews.com/news/us-news/d…
Yesterday, Microsoft used Windows Defender “killswitch” to remotely quarantine infected systems, in an extraordinary measure demonstrating the company’s power over its operating system, hinting at capabilities available to counteract unprecedented breaches geekwire.com/2020/microsoft…
The SolarWinds hackers got caught after successfully logging in to FireEye’s network, which was flagged as suspicious, thus tipping the company off to the broader hacking campaign politico.com/news/2020/12/1…
Victims of SolarWinds hack are confirmed to include Cox Communications and the local government in Pima County, Arizona, showing that the hackers also spied on less high-profile organizations reuters.com/article/us-usa…
Russian hackers gained access to client networks by embedding malware in an update to the Oracle software managed by SolarWinds
https://twitter.com/trickfreee/status/1340886209543897094
Hackers last year conducted a 'dry run' of SolarWinds breach news.yahoo.com/hackers-last-y…
City of Austin was a target of hackers linked to Russian intelligence cbsaustin.com/news/local/cit…
On Dec. 7, 2020, the NSA said “Russian state-sponsored malicious cyber actors are exploiting a vulnerability in VMware Access and VMware Identity Manager products, allowing the actors access to protected data and abusing federated authentication.”
krebsonsecurity.com/2020/12/vmware…
krebsonsecurity.com/2020/12/vmware…
SolarWinds compromise may have began as early as October 2019
securityscorecard.com/blog/solarwind…
securityscorecard.com/blog/solarwind…
According to a security research blog published by Microsoft, another hacking group that’s separate from the Russian hack of SolarWinds, also attacked the company products earlier this year, possibly in late March, and is being dubbed “supernova” usnews.com/news/top-news/…
Treasury Department’s Senior Leaders Were Targeted by Russia’s Sunburst Hack nytimes.com/2020/12/21/us/…
'Dozens of email accounts' were hacked at U.S. Treasury
The Treasury Department announced a new set of Russian sanctions in October 2019, around the same time as the earliest known compilation of the Sunburst hacking tools
reuters.com/article/us-glo…
The Treasury Department announced a new set of Russian sanctions in October 2019, around the same time as the earliest known compilation of the Sunburst hacking tools
reuters.com/article/us-glo…
In October 17th, 2019, Russia’s FSB said it was resuming cooperation with the US on cyber security reuters.com/article/us-rus…
Also in October 2019, Putin began building Russia’s Internet “kill-switch” to protect Russia against US cyber attacks forbes.com/sites/zakdoffm…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
