4 ms·
I guess the real question is, why should these IP addresses from those countries make this attack attributable to Russia? Unless you can answer that, yours doe
by ryanlol 10y ago
I guess the real question is, why should these IP addresses from those countries make this attack attributable to Russia?
Unless you can answer that, yours doesn't really make much sense.
- 15155 10y agoWhy would IP addresses _in Russia_ automatically make attacks attributable to Russia?
- ryanlol 10y agoThey wouldn't?
- codedokode 10y agoThey would not. Most probably found IP addresses will be either some cheap VPS bought by anonymous person or a Tor exit node (or maybe some infected machine). It is unlikely that government hackers would use stolen passwords at a computer in Kremlin or Capitol or Beijing or whereever they are.
- dominotw 10y ago>why should these IP addresses from those countries make this attack attributable to Russia? "DHS has released a Joint Analysis Report (JAR) attributing those compromises to Russian malicious cyber activity, designated as GRIZZLY STEPPE. " This is one of the 'GRIZZLY STEPPE Indicators' . Am i reading this wrong ?
- ryanlol 10y agoYes. I can't imagine how you could possibly come to the conclusion that there's supposed to be anything attribution related here. They explicitly stated this is just indicators of compromise that network administrators should look for. >DHS recommends that network administrators review the Security Publication for more information and implement the recommendations provided. not >DHS recommends that everyone review the irrefutable proof that communists hacked DNC