2 ms·
Very little technical information. Still interesting article in its own right.
by touristtam 10y ago
Very little technical information. Still interesting article in its own right.
- r3bl 10y agoI would say more than usual. We have the info about how long were they inside of the network, we have some basic idea about how they are discovered to be connected to Russia (basically groups were previously linked to Russia, and now they were probably discovered by analyzing the code style and/or by re-using some of the code), we got to know how the incident response went, we discovered that they used 0 days targeting Windows, that they masked their traffic as legit Windows services, that they have created some kind of pattern analyzing tool that analyzes the code they got on every machine so they could detect if the attackers try breaching into the system again... I'd say that this is a pretty hefty amount of information we got from a single article when it's not really a post mortem by the company, but an article on Washington Post.
- fizbin 10y agoSome more technical information is available on CrowdStrike's blog: http://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/ http://www.crowdstrike.com/blog/bears-midst-intrusion-democr...