3 ms·
Earlier news reports said they came to that conclusion by comparing the RAT artifacts on the compromised machines. ETA: Also, the bit.ly URLs used in the phish
by AlexCoventry 10y ago
Earlier news reports said they came to that conclusion by comparing the RAT artifacts on the compromised machines.
ETA: Also, the bit.ly URLs used in the phishing attacks indicated sharing of resources with other APT28 hacks.
http://motherboard.vice.com/read/how-hackers-broke-into-john-podesta-and-colin-powells-gmail-accounts http://motherboard.vice.com/read/how-hackers-broke-into-john...
- Natsu 10y agoIt's not the bit.ly URLs, but allegedly the domain they pointed to, though they don't show us any other links to it. For reference, this is the Podesta phishing email: https://wikileaks.org/podesta-emails/emailid/34899 https://wikileaks.org/podesta-emails/emailid/34899 And this is the stats page for the bit.ly link in that email: https://bitly.com/1PibSU0+ https://bitly.com/1PibSU0+