3 ms·
> A code associated with the Russian hacking operation dubbed Grizzly Steppe by the Obama administration has been detected within the system of a Vermont utilit
by losvedir 10y ago
> A code associated with the Russian hacking operation dubbed Grizzly Steppe by the Obama administration has been detected within the system of a Vermont utility, according to U.S. officials.
First question: what is "Grizzly Steppe"? I thought it was the name given to the actions by both APT28 and APT29. Is this article claiming that somehow this campaign is related to the DNC / Podesta campaign? Or just that the malware involved was the same one used there and therefore probably something done by one or the other. And by "a code associated with", I wonder what that means? The Grizzly Steppe document released yesterday included things like "Powershell backdoor" as associations with APT28/29, but that can't be what they mean here, right?
> This week, officials from the Department of Homeland Security, FBI and the Office of the Director of National Intelligence shared the Grizzly Steppe malware code with executives from 16 sectors nationwide, including the financial, utility and transportation industries, a senior administration official said. Vermont utility officials identified the code within their operations and reported it to federal officials Friday, the official said.
So was this the PAS_TOOL_PHP_WEB_KIT Yara signature in the document released yesterday then? Or is there more unreleased info that the FBI and DNI released to those executives?