John Scott-Railton Profile picture
Feb 15, 2023 11 tweets 10 min read Read on X
WHOA: Team of Israeli ex-spies boast of manipulating 33 elections w/ #hacking & #bots.

Tricked into demoing #telegram hacking & bot army to undercover investigators.

By @skirchy @manisha_bot @davidtpegg @carolecadwalla & @burke_jason
theguardian.com/world/2023/feb… ImageImageImageImage
2/ “After you’ve created credibility, what do you do? Then you can manipulate"

Good to see @Meta take action on these accounts.

Honestly though we are at the absolute tip of the iceberg. ImageImage
3/ Here he is demoing access to the #Gmail of a purported key political insider in #Kenya just days before the election.

This tech & tactics is kerosene on the flames of democracy. Image
4/ “I know in some countries they believe #Telegram is safe. I will show you how safe it is”

Yikes.

Unclear how he is gaining access to these #Gmail & Telegram accounts, but the talk of #SS7 is a good hint.

And yet another reminder: SMS is not a safe second factor. ImageImage
5/ Great to see mercenary election manipulators exposed. Solid journalism.

Trust me, this is a window into a *much bigger industry* active in elections around the world.

So rare to see it caught.
6/ The fact that so much political activity happens on a handful of platforms makes the tooling for political manipulation really interoperable.

Also radically lowers barriers to entry.

Making mercenary election manipulation scaleable & easy to export. Image
7/ Of course, we don't know whether these guys have successfully changed the outcome of any election.

The guy here is also pretty clearly boasting & trying to sell.

But the mere fact of mercenary election manipulators running around is damaging, even when they don't win.
8/ Even if mercenary election manipulators don't successfully throw an election (e.g. successfully shift mass sentiment), bots, hacking & turbocharged dirty tricks can distort political culture.

Opposing parties have to adjust.

And the net result is harm to democracy.
9/ UPDATE: @haaretzcom reports the mercenary political manipulators targeted 🇺🇸US politicians.

Like @GavinNewsom in #California

Topic: #diablocanyon nuclear plant

Were taxpayer funds routed to #TeamJorge for that op?

STORY haaretz.com/israel-news/se… ImageImageImageImage
10/ Powerful coda to this remarkable story
11/ Really remarkable undercover work went into this story.

Huge credit to @omerbenj @GurMegiddo & @FredMetzo for pulling off such a feat.

These are paranoid people confessing to illegal things, it cannot have been easy.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with John Scott-Railton

John Scott-Railton Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @jsrailton

Aug 21
NEW: Researchers find microplastics in human brains.

Moreover, shards of microplastics in autopsied brain tissue increased between samples collected in 2016 vs. 2024.

Frontal cortex tissue (executive function, learning & memory, judgement...) concentrations were 7-30x those previously found in livers & kidneys.

Incredibly alarming potential implications for #AlzheimersDisease, dementia, blood brain barrier health etc.

Caveats: early days in methodology for spotting & characterizing these particle loads & understanding their impacts on brain health.

And that's just focusing on the physical particles.

There's a whole second disturbing tier of questions around what potentially toxic compounds like plasticizers will leach from #microplastics, especially as the particle size gets smaller.

Preprint: ncbi.nlm.nih.gov/pmc/articles/P…Image
Image
Image
Image
2/ There doesn't appear to be a place on earth that hasn't got a microplastics load.

Dust in the atmosphere? Yep. The ocean? Yep. Creatures in it? Yep. Ocean breezes by the seashore? Yep.

Now our brains.

It's like the radioisotopes from atmospheric nuclear testing. Only there's no test ban in sight, and more are pouring into the ecosystem with every moment.

But the impact on us and our world are shockingly ill- understood.
3/ There is no home test for #microplastics.

If it existed, people would be demanding action.

We are in a honeymoon of mostly-ignorance.
Read 7 tweets
Aug 14
NEW: sophisticated phishing targets Russia's perceived enemies around the globe.

Targets were sent credible approaches pretending to be friends & colleagues.

Here's why we say 🇷🇺#Russia's spies are responsible 1/🧵

Collaboration between us @citizenlab & @accessnow, with @DeptFirst, Arjuna Team &

REPORT: RESIDENT.ngo
citizenlab.ca/2024/08/sophis…Image
Image
2/ Here's a typical attack: an email comes in, seemingly from a colleague you know well. It sounds like them.

They want you to look at an attached document.

But there's a twist: there is no attachment!

This is intentional, and clever...Image
3/. You've been taught to be suspicious of messages with attachments and links. Good.

But this email from your colleague has no attachment.

Not as suspicious. What hacker would forget to send an attachment?

The 'mistake' is to lure you into helpfully replying to let your colleague know that they forgot to attach the file.

Once you've bitten and reply back, the attacker sends you a file that looks 'encrypted'.Image
Read 13 tweets
Aug 7
People saying a lot of things about Gov. Tim Walz.

Like that he's a map nerd.

And as a map nerd, I was skeptical.

Until I spotted an @Esri* tote bag being loaded into his motorcade yesterday.

Rumor: confirmed.

*(ESRI: Biggest maker of Geographic Information Systems software)Image
2/ “A geographically illiterate member of the United States Congress is a very scary proposition,” he said.

Me nodding along so hard I hurt my neck.

minnesotareformer.com/2024/08/06/for…


Image
Image
Image
3/ Gov Tim Walz talks about a detailed map portfolio to track progress on key issues in the state.

I looked, and it is pretty cool stuff.

Everything from school meals & burdensome housing costs, to child care needs and availability, job growth, unemployment and even internet speed.

Browse yourself: experience.arcgis.com/experience/c44…Image
Image
Image
Image
Read 6 tweets
Aug 2
Website backed by billionaire solicits detailed info with a "Register to Vote" button.

But won't send voters to genuine voter registration sites if they are in a battleground state.

Oh, and the billionaire is Elon Musk.

By @schwartzbCNBC
cnbc.com/2024/08/02/elo…Image
WOW: Here's Elon Musk's America PAC bait-and-switch voter registration page.

It showed me: "Voter Registration It takes less than two minutes to register"

I entered information saying I was from Michigan and it solicited a lot of detailed personal information

Then it was over. It did not send me to an official voter registration page.Image
Image
Image
Image
On the other hand, on Musk's America PAC website if I enter my zip code as a non-competitive state like Tennessee...

Unlike for Michigan, I am not shown a form requesting detailed personal information.

Instead, I am instantly offered to the Tennessee state official formImage
Read 7 tweets
Jul 26
You've been non-consensually opted into training Twitter / X's Grok AI.

Want to opt out?

✅Go here:

-or-

✅Navigate to: Settings ➡️ Privacy & Safety ➡️ Grokx.com/settings/grok_…Image
I'm hearing a lot of feedback from people struggling to opt out of Grok data sharing in on the mobile app.

Some report having success with the web version.

Again, not good. Regulators are surely paying attention.
Big Picture: Default Opt-Ins from big platforms are not good.

They typically exist because platforms want numbers & know that default opt-ins usually get much more participation than default opt-outs.

Draw your own conclusions whenever you see them being applied.
Read 4 tweets
Jul 12
STAGGERING: Nearly all @ATT customers' text & call records breached.

An unknown entity now has an NSA-level view into Americans' lives.

Damage isn't limited to AT&T customers.

But everyone they interacted with.

Also a huge national security incident given government customers on $T. 1/

By @MattEganCNN &@snlyngaas
cnn.com/2024/07/12/bus…Image
Image
Image
Image
2/ From @ATT's SEC filing. None of this is remotely reassuring.

Making matters worse, it looks like some of the data has cell site information.

That means broad stroke location information that can be translated into intelligence about peoples' locations and movements.

sec.gov/ix?doc=/Archiv…Image
3/ Attack of the dreaded third-party cloud platform. In this case, per reporting, this is again @SnowflakeDB.

If this sounds vaguely familiar it's because Snowflake has featured in reporting on a whole host of recent breaches, from #Santander to #Ticketmaster.

In other news, Snowflake finally implemented mandatory multi-factor authentication option.Image
Image
Read 10 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Don't want to be a Premium member but still want to support us?

Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal

Or Donate anonymously using crypto!

Ethereum

0xfe58350B80634f60Fa6Dc149a72b4DFbc17D341E copy

Bitcoin

3ATGMxNzCUFzxpMCHL5sWSt4DVtS8UqXpi copy

Thank you for your support!

Follow Us!

:(