4 ms·

First link that came up at google WITHOUT A PAYWALL: http://betanews.com/2016/11/02/russian-hackers-exploit-windows-security-flaw/ http://betanews.com/2016/11/

by aluhut 10y ago

First link that came up at google WITHOUT A PAYWALL: http://betanews.com/2016/11/02/russian-hackers-exploit-windows-security-flaw/ http://betanews.com/2016/11/02/russian-hackers-exploit-windo... And the Microsoft blog post: https://blogs.technet.microsoft.com/mmpc/2016/11/01/our-commitment-to-our-customers-security/ https://blogs.technet.microsoft.com/mmpc/2016/11/01/our-comm...

acqq 10y ago
And Microsoft's post doesn't seem to mention "Russian" anything. Compare that with the coverage in the style of "Microsoft CONFIRMED Russians help HIM" Edit: The titles of the articles and the coverage make a logical jump that the authors of the texts took care to avoid. The jump is only to be explained by the need of the influence of the perception of the readers shortly before the elections.
- r721 10y ago
  They state that STRONTIUM is likely APT28/Sofacy in linked PDF: "STRONTIUM has been active since at least 2007. Whereas most modern untargeted malware is ultimately profit-oriented, STRONTIUM mainly seeks sensitive information. Its primary institutional targets have included government bodies, diplomatic institutions, and military forces and installations in NATO member states and certain Eastern European countries. Additional targets have included journalists, political advisors, and organizations associated with political activism in central Asia. STRONTIUM is Microsoft’s code name for this group, following its internal practice of assigning chemical element names to activity groups; other researchers have used code names such as APT28, Sednit, Sofacy, and Fancy Bear as labels for a group or groups that have displayed activity similar to the activity observed from STRONTIUM. The group’s persistent use of spear phishing tactics and access to previously undiscovered zero-day exploits have made it a highly resilient threat." http://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_A_Profile_Of_A_Persistent_Adversary_English.pdf http://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4...
aembleton 10y ago
Alternatively, get this addon: https://addons.mozilla.org/en-GB/firefox/addon/refcontrol/ https://addons.mozilla.org/en-GB/firefox/addon/refcontrol/ or an equivalent for Chrome. Then add www.ft.com and www.wsj.com sites with the Action of https://www.google.com https://www.google.com
- aluhut 10y ago
  Thank you but I just don't click them at all any more.
- blahi 10y ago
  Hey, come work for me. I have an addon on Outlook that blocks emails where employees demand their salary.
  - dvtv75 10y ago
    ...I think my boss uses that.
- kzisme 10y ago
  This is nice - but...I'd rather not read/support paywalls by reading their content.

by aluhut 10y ago

acqq 10y ago

And Microsoft's post doesn't seem to mention "Russian" anything. Compare that with the coverage in the style of "Microsoft CONFIRMED Russians help HIM" Edit: The titles of the articles and the coverage make a logical jump that the authors of the texts took care to avoid. The jump is only to be explained by the need of the influence of the perception of the readers shortly before the elections.

r721 10y ago
They state that STRONTIUM is likely APT28/Sofacy in linked PDF: "STRONTIUM has been active since at least 2007. Whereas most modern untargeted malware is ultimately profit-oriented, STRONTIUM mainly seeks sensitive information. Its primary institutional targets have included government bodies, diplomatic institutions, and military forces and installations in NATO member states and certain Eastern European countries. Additional targets have included journalists, political advisors, and organizations associated with political activism in central Asia. STRONTIUM is Microsoft’s code name for this group, following its internal practice of assigning chemical element names to activity groups; other researchers have used code names such as APT28, Sednit, Sofacy, and Fancy Bear as labels for a group or groups that have displayed activity similar to the activity observed from STRONTIUM. The group’s persistent use of spear phishing tactics and access to previously undiscovered zero-day exploits have made it a highly resilient threat." http://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_A_Profile_Of_A_Persistent_Adversary_English.pdf http://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4...

aembleton 10y ago

Alternatively, get this addon: https://addons.mozilla.org/en-GB/firefox/addon/refcontrol/ https://addons.mozilla.org/en-GB/firefox/addon/refcontrol/ or an equivalent for Chrome. Then add www.ft.com and www.wsj.com sites with the Action of https://www.google.com https://www.google.com

aluhut 10y ago
Thank you but I just don't click them at all any more.
blahi 10y ago
Hey, come work for me. I have an addon on Outlook that blocks emails where employees demand their salary.
- dvtv75 10y ago
  ...I think my boss uses that.
kzisme 10y ago
This is nice - but...I'd rather not read/support paywalls by reading their content.