4 ms·

According to DOJ [1], "Someone" is Fancy Bear [2] and the FBI has seized control [3] of the C&C domain (ToKnowAll.com) [1] https://www.justice.gov/opa/pr/justi

by meritt 8y ago

According to DOJ [1], "Someone" is Fancy Bear [2] and the FBI has seized control [3] of the C&C domain (ToKnowAll.com) [1] https://www.justice.gov/opa/pr/justice-department-announces-actions-disrupt-advanced-persistent-threat-28-botnet-infected https://www.justice.gov/opa/pr/justice-department-announces-... [2] https://en.wikipedia.org/wiki/Fancy_Bear https://en.wikipedia.org/wiki/Fancy_Bear [3] https://www.engadget.com/2018/05/24/fbi-seizes-domain-russian-botnet/ https://www.engadget.com/2018/05/24/fbi-seizes-domain-russia...

Dolores12 8y ago
Any evidence or press release is enough?
- meritt 8y ago
  https://blog.talosintelligence.com/2018/05/VPNFilter.html https://blog.talosintelligence.com/2018/05/VPNFilter.html provides a detailed technical overview of how VPNFilter functions and their findings conclude it appears to be a derivative of similar efforts by the same group. NCCIC released the following analysis last year with more on the topic: https://www.us-cert.gov/sites/default/files/publications/AR-17-20045_Enhanced_Analysis_of_GRIZZLY_STEPPE_Activity.pdf https://www.us-cert.gov/sites/default/files/publications/AR-... Sophos published an article a month ago that warned about this exact scenario: https://nakedsecurity.sophos.com/2018/04/18/russias-grizzly-steppe-gunning-for-vulnerable-routers/ https://nakedsecurity.sophos.com/2018/04/18/russias-grizzly-...
takeitto 8y ago
I believe this is what Antonov meant when he said: "A pre-designed scenario is being implemented, Again, we are being threatened. We warned that such actions will not be left without consequences." in response to the latest Syria strike. WWIII may not be nukes, but complete economic chaos after banks, hospitals, militaries, and electricity networks are taken down.
- hoffbrau99 8y ago
  Good reasons to start being a prepper if you aren't already
  - maerF0x0 8y ago
    And to watch all of Mr. Robot for ideas.
    - jageen 8y ago
      And "dai hard 4".
rurban 8y ago
Let's just abbreviate "Someone" to "The Russian Government". They are mostly targeting Ukraine, but who know what else they are up to. Almost as troubling as the US government actions.

by meritt 8y ago

Dolores12 8y ago

Any evidence or press release is enough?

meritt 8y ago
https://blog.talosintelligence.com/2018/05/VPNFilter.html https://blog.talosintelligence.com/2018/05/VPNFilter.html provides a detailed technical overview of how VPNFilter functions and their findings conclude it appears to be a derivative of similar efforts by the same group. NCCIC released the following analysis last year with more on the topic: https://www.us-cert.gov/sites/default/files/publications/AR-17-20045_Enhanced_Analysis_of_GRIZZLY_STEPPE_Activity.pdf https://www.us-cert.gov/sites/default/files/publications/AR-... Sophos published an article a month ago that warned about this exact scenario: https://nakedsecurity.sophos.com/2018/04/18/russias-grizzly-steppe-gunning-for-vulnerable-routers/ https://nakedsecurity.sophos.com/2018/04/18/russias-grizzly-...

takeitto 8y ago

I believe this is what Antonov meant when he said: "A pre-designed scenario is being implemented, Again, we are being threatened. We warned that such actions will not be left without consequences." in response to the latest Syria strike. WWIII may not be nukes, but complete economic chaos after banks, hospitals, militaries, and electricity networks are taken down.

hoffbrau99 8y ago
Good reasons to start being a prepper if you aren't already
- maerF0x0 8y ago
  And to watch all of Mr. Robot for ideas.
  - jageen 8y ago
    And "dai hard 4".

rurban 8y ago

Let's just abbreviate "Someone" to "The Russian Government". They are mostly targeting Ukraine, but who know what else they are up to. Almost as troubling as the US government actions.