Exclusive: Russian hackers have been inside Austin city network for months interc.pt/38hFTGP by @MaraHvistendahl, @micahflee, @chronic_jordan
The Austin breach was revealed in documents prepared by the Microsoft Threat Intelligence Center, or MSTIC, and obtained by The Intercept, as well as in publicly available malware activity compiled by the site VirusTotal.
The hacking outfit believed to be behind the Austin breach, Berserk Bear, also appears to have used Austin’s network as infrastructure to stage additional attacks.
The intrusion represents another battlefront in a high-stakes cyber standoff between the United States and Russia. Both Berserk Bear and Cozy Bear are known for quietly lurking in networks, often for months, while they spy on their targets.
Malware still appears to be communicating with Austin’s network.
The most recent malware sample found on VirusTotal that was observed communicating with Austin’s IP address was submitted to the site for analysis on December 15, two days ago.
The most recent malware sample found on VirusTotal that was observed communicating with Austin’s IP address was submitted to the site for analysis on December 15, two days ago.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
