NSA confidential documents revealed that the Russian intelligence agency was engaged in a cyber attack on 122 US municipal officials


ByGerry Lauzon

According to the top secret document of the National Security Agency (NSA) acquired by the American net media · The Intercept, the General Directorate General of Information for Federal Army Staff of Russia (GRU) conducts a spy act against the manufacturer of electronic ballot paper in the United States Invade the employee's account, and based on the information gained from it, to 122 municipal officialsSpear phishing attackIt was revealed that it was setting up.

Top-Secret NSA Report Details Russian Hacking Effort Days Before 2016 Election
https://theintercept.com/2017/06/05/top-secret-nsa-report-details-russian-hacking-effort-days-before-2016-election/


According to The Intercept, confidential documents were provided anonymously. Upon confirmation by the NSA and NSA Secretary, it seems that the document was rejected for publication, coverage and comment, but ultimately it is requested for some modification (editing), and for the necessary part in light of public interest It was said that it came to accept. Some black filled material is published in DocumentCloud so that anyone can refer to it, and the original PDF file can also be downloaded.

NSA Report on Russia Spearphishing
https://www.documentcloud.org/documents/3766950-NSA-Report-on-Russia-Spearphishing.html

The document is 5 pages in all. On the final page, "Spear phishing attack strategy" by GRU is shown. In short, it is planned to send a phishing mail according to the target language, open the attached file on the target, steal the password · telephone number · 2-step verification code.


According to the document, the GRU hacker sent an e-mail that disguised the sender to Google in August 2016, for employees of the company of the electronic voting software, and obtained employee login information.

And in October 2016, based on the information obtained by the above attack, we created a Gmail account that looked like an employee of an electronic voting software company, and for the staff of the local government, the second Spear I tried a phishing attack.

NSA reports "Unknown" whether this second bullet attack was successful or what kind of information the GRU hacker succeeded in obtaining information. The company of electronic voting software was attacked, but according to NSAUS presidential election held in November 2016There is no particular influence on the result of.

By the way, President Vladimir Putin who attended the economic forum on June 1, 2017 on suspicion that Russia is trying to engage in the election by launching a cyber attack on another country against the overseas mediaThere is a possibility that a hacker who is not involved but a patriotic person can volunteerAlthough I told you that the NSA document clearly shows the involvement of the Russian government.

President PutinTaking retaliatory response to election interferenceCompared to former President Obama who had expressed his will, President Trump"Adhesion" with Russia points outIt is attracting attention also to the progress of this case.

in Security, Posted by logc_nt