Live data from Hacker News

US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

wordfence.com

61–70 of 120 posts

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#61
post #55

I don't know how much of the HN community is old enough to remember Colin Powell just prior to the first Iraq war, getting up in front of the UN and the whole world for that matter, and asserting that there was ironclad proof that Iraq had weapons of mass destruction (which we came to know as WMD). Different parts of the government had the same talking points and it was all presented as irrefutable facts. But the evi…

[deleted]

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#62
post #13

Earlier quoted context omitted.

If we're going to speculate, I'd say Kim Dotcom is more suspicious based on his tweets. I thought he tweeted some statements indicating foreknowledge of certain leaks, but I never investigated it carefully. EDIT: I'm certainly not claiming he did anything, I read this as just sour grapes, but look for yourself at a sample - http://imgur.com/a/zv174 EDIT 2: This is more like it - https://www.bloomberg.com/politics/art…

I don't know why OP is being down voted. Kim Dotcom tweeted he had early access to the leaks. It feels like a more plausible theory to me than the one the Obama administration is pushing. He announced his attention to be "an Internet Freedom fighter" and "Hillary's worse nightmare in 2016" back in 2014. Look at this tweet from 10 hours ago: "My old hacker firm Data Protect hacked 100% of its clients." https://twitter…

There's always heavy downvoting in these threads. Look for interesting discussion to upvote to counter.

Thanks for those tweets, yes, he has done a lot of things that make him at least suspicious. I wouldn't take him seriously at all if not for the fact that he predicted some of this.

Incidentally, for those mentioning McAfee, I see no reason to take that guy seriously, nor am I presently aware of him displaying any foreknowledge of any of this.

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#63
This is the type of amateur analysis I would expect from a "Wordpress security" professional, certainly not front page worthy.

He completely ignored what this malware was used for. The attack was a spearphishing campaign by APT29 that used hosts compromised with this malware to send emails from legitimate government domains to targeted individuals in the DNC and the US Government. The emails themselves contained malware that has only ever been used by APT29.

Separately, APT28 ran a spearphishing campaign that directed recipients to a webmail domain hosted on APT28 operational infrastructure to change their passwords.

This Joint Analysis Report is telling the government agencies whose infrastructure was used to send the spearphishing emails to secure their Wordpress installations to help reduce the risk of government infrastructure being used to send legitimate-looking spearphishing emails.

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#64
post #60

Earlier quoted context omitted.

How were Sanders's claims of Clinton rigging the elections proved by the emails released on WikiLeaks?

I didn't follow the Sanders campaign closely enough to be able to identify the more relevant items, but looking at the Wikileaks data gave me the impression that he was a token candidate who they controlled with various bits of leverage (e.g. when they cut him out of the DNC voter systems). There was also that time when they staged violence at the Trump rallies and blamed it on Bernie supporters. Refer to the controv…

How was Sanders a token candidate controlled by the DNC? My memory of the primaries is far different, with Sanders suing the DNC over access to NGP VAN (which the DNC had cut off until the Sanders campaign showed they had deleted their copies of Clinton's data), loudly complaining about the DNC following the existing rules at the Nevada Convention (http://www.politifact.com/nevada/statements/2016/may/18/jeff...), and generally loudly making unfounded allegations of rigging. If Sanders was a token candidate, whom would you consider a big name Democrat worthy of challenging Clinton not as a token opponent?

> There was also that time when they staged violence at the Trump rallies and blamed it on Bernie supporters.

The DNC did not stage violence at Trump rallies and blame it on Bernie supporters. You're probably thinking about http://www.cnn.com/2016/10/18/politics/project-veritas-actio..., who incited Trump supporters to violence, which is different from pretending to be a violent Sanders supporter. Zulema Rodriguez also had nothing to do with "rigging the primaries."

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#65
post #60

Earlier quoted context omitted.

I didn't follow the Sanders campaign closely enough to be able to identify the more relevant items, but looking at the Wikileaks data gave me the impression that he was a token candidate who they controlled with various bits of leverage (e.g. when they cut him out of the DNC voter systems). There was also that time when they staged violence at the Trump rallies and blamed it on Bernie supporters. Refer to the controv…

How was Sanders a token candidate controlled by the DNC? My memory of the primaries is far different, with Sanders suing the DNC over access to NGP VAN (which the DNC had cut off until the Sanders campaign showed they had deleted their copies of Clinton's data), loudly complaining about the DNC following the existing rules at the Nevada Convention ( http://www.politifact.com/nevada/statements/2016/may/18/jeff... ), a…

Elizabeth Warren is probably the top of the list. I also remember various questionable vote counting during the caucuses, but I'm basing this on what Bernie supporters were saying at the time, so you might be right about it being inaccurate. I wasn't personally paying much attention yet, as I'd already assumed Clinton had the nomination in the bag.

I am thinking of that incident and there's a lot going on in that one. You can see Bernie supporters getting blamed here, though:

http://www.msnbc.com/msnbc/sanders-supporters-divided-trump-...

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#66
post #27

Earlier quoted context omitted.

This is too sinple. Russia is actively pushing an agenda as well - the invasion of Ukraine and annexation of Crimea were not a response to US/NATO aggression. A new cold war has also been pushed domestically for the political benefit of Putin et al. If Trump had done basic things like released his tax returns (to show no massive conflict of interest with Russian loans etc) or stopped praising Putin on a regular basis…

The invasion of Crimea was a direct response to US/NATO aggression. 1) The US helped plot to overthrow the Ukranian government in 2014. 2) Russia was not keen on NATO pushing for Ukraine to become a member, which would literally put the Russians major warm naval port under NATO hands. 3) Crimea has been a part of Russia for centuries, the only reason Crimea became a part of Ukraine after the breakup of the Soviet Uni…

Many of your points are valid. However pointing to an "election" with no real choice while occupied by a foreign power undermines your position significantly.

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#67
post #55

I don't know how much of the HN community is old enough to remember Colin Powell just prior to the first Iraq war, getting up in front of the UN and the whole world for that matter, and asserting that there was ironclad proof that Iraq had weapons of mass destruction (which we came to know as WMD). Different parts of the government had the same talking points and it was all presented as irrefutable facts. But the evi…

Colin Powell just prior to the first Iraq war, getting up in front of the UN

I think you mean second, don't you? What's commonly referred to as the First Iraq War would be following the invasion of Kuwait in 1990.

https://en.m.wikipedia.org/wiki/Gulf_War

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#68
post #67
post #55

I don't know how much of the HN community is old enough to remember Colin Powell just prior to the first Iraq war, getting up in front of the UN and the whole world for that matter, and asserting that there was ironclad proof that Iraq had weapons of mass destruction (which we came to know as WMD). Different parts of the government had the same talking points and it was all presented as irrefutable facts. But the evi…

Colin Powell just prior to the first Iraq war, getting up in front of the UN I think you mean second, don't you? What's commonly referred to as the First Iraq War would be following the invasion of Kuwait in 1990. https://en.m.wikipedia.org/wiki/Gulf_War

In the US at least, it's usually referred to as the Gulf War. While I've never personally heard the "first" Gulf War referred to as the first Iraq War I've heard of the current conflict called the second Gulf War. Is that not the norm?

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#69
post #55

I don't know how much of the HN community is old enough to remember Colin Powell just prior to the first Iraq war, getting up in front of the UN and the whole world for that matter, and asserting that there was ironclad proof that Iraq had weapons of mass destruction (which we came to know as WMD). Different parts of the government had the same talking points and it was all presented as irrefutable facts. But the evi…

I think it is reasonable to be skeptical of government claims but it is also important to clearly distinguish between these two cases. In the WMD situation the government was analyzing the actions of two third parties (the Hussein government and arms dealers) engaged in activities outside of the US. In this hacking situation these are actions being taken against US entities.

I don't believe anyone disputes that the DNC and other agencies "were compromised" (I'm sure John Podesta did not release all of his email voluntarily for example). So unlike the WMD scenario it seems incontrovertibly clear that some actor did do this.

A number of non-government people have identified the servers, malware, and techniques as originating either in Russia or the Ukraine. Krebs has written several times on gangs that have stolen credentials this way.

Finally people have signatures in their actions, they learn things in one way and they do things in that way. That has been true since the beginning of time. I remember identifying other Amateur Radio operators by the way in which they keyed code.

As a result, unlike the alleged WMD development efforts, I don't think anyone disagrees that various people were hacked, or that the groups that hacked them are associated with Russian and Ukrainian interests. The only question is whether or not they did so at the behest of their government or just for the lulz.

If anonymous were still around I expect they could get away with what ever pranks they wanted to play on Russian interests at the moment. The interesting question is whether the government would shield them from any Russian retaliation.

Re: US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware

#70
post #65

Earlier quoted context omitted.

How was Sanders a token candidate controlled by the DNC? My memory of the primaries is far different, with Sanders suing the DNC over access to NGP VAN (which the DNC had cut off until the Sanders campaign showed they had deleted their copies of Clinton's data), loudly complaining about the DNC following the existing rules at the Nevada Convention ( http://www.politifact.com/nevada/statements/2016/may/18/jeff... ), a…

Elizabeth Warren is probably the top of the list. I also remember various questionable vote counting during the caucuses, but I'm basing this on what Bernie supporters were saying at the time, so you might be right about it being inaccurate. I wasn't personally paying much attention yet, as I'd already assumed Clinton had the nomination in the bag. I am thinking of that incident and there's a lot going on in that one…

> I also remember various questionable vote counting during the caucuses.

The caucuses were heavily skewed in Sanders's favor. Caucusing requires a large time commitment, which favored Sanders supporters over the poor minority Clinton voters. You're probably thinking about the Nevada Convention, which I explained in my previous comment.

> I wasn't personally paying much attention yet, as I'd already assumed Clinton had the nomination in the bag.

She certainly had it in the bag, which makes the claim that she would resort to rigging the primaries even more ludicrous. She got almost 30% more of the popular vote than Sanders. Despite the media wanting to make the race seem close and interesting, it was obvious to even a casual observer like you that it was a landslide.

> You can see Bernie supporters getting blamed here, though:

The people quoted in that article are actual Bernie supporters.

Post reply on HN