10/12/20: Microsoft obtained a federal court order to disable IP addresses & take down servers belonging to Trickbot that could have indirectly affected election infrastructure if allowed to continue. Worked with telecom providers around the world...
cnn.com/2020/10/12/tec…
cnn.com/2020/10/12/tec…
Same time, US Cyber Command sought to disrupt world’s largest botnet, hoping to reduce its potential impact on the election.
But calls of election fraud & hacking aren't true, according to same media sources, Congress, and people within the government.
washingtonpost.com/national-secur…
But calls of election fraud & hacking aren't true, according to same media sources, Congress, and people within the government.
washingtonpost.com/national-secur…
Trickbot allowed hackers to offer capability to inject vulnerable computers, routers & devices w/ malware including ransomware.
🔥🔥🔥
US OFFICIALS WARNED could pose risk to websites displaying election info or to 3rd-party software vendors providing service to election officials
🔥🔥🔥
US OFFICIALS WARNED could pose risk to websites displaying election info or to 3rd-party software vendors providing service to election officials
What the hell is really going on?
“Department of Defense & Cyber Command specifically, are supporting broader ‘whole-of-government’ approach to secure our elections.”
“Is this permanent? Of course not.” But any effort to degrade the botnet should be applauded, an official said.
“Department of Defense & Cyber Command specifically, are supporting broader ‘whole-of-government’ approach to secure our elections.”
“Is this permanent? Of course not.” But any effort to degrade the botnet should be applauded, an official said.
Russian-speaking hackers again!
Collaborative effort between Microsoft & US Cyber Command. Used model from 2018 midterms to covertly strike Russian-speaking hackers it believes could interrupt casting, counting & certifying of ballots on election day.
dtc1.com/us-cyber-comma…
Collaborative effort between Microsoft & US Cyber Command. Used model from 2018 midterms to covertly strike Russian-speaking hackers it believes could interrupt casting, counting & certifying of ballots on election day.
dtc1.com/us-cyber-comma…
Still have access to non-US based infrastructure!
"Throughout takedown effort...Trickbot operators have continuously attempted to spin up new instances. Operators still maintain access to non-US-based infrastructure allowing them to continue their attacks"
darkreading.com/threat-intelli…
"Throughout takedown effort...Trickbot operators have continuously attempted to spin up new instances. Operators still maintain access to non-US-based infrastructure allowing them to continue their attacks"
darkreading.com/threat-intelli…
11/02/20:
TrickBot is back in action. This time operators have returned with more power & enhanced tactics to disrupt their victims’ systems.
TrickBot’s author moved a portion of the code to Linux to create new variant of trojan dubbed ‘Anchor_DNS’.
cyware.com/news/trickbot-…
TrickBot is back in action. This time operators have returned with more power & enhanced tactics to disrupt their victims’ systems.
TrickBot’s author moved a portion of the code to Linux to create new variant of trojan dubbed ‘Anchor_DNS’.
cyware.com/news/trickbot-…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
