3 ms·
The indictment doesn't assert an APT, just plain-old spearphish, steal password, install backdoor. If this was the GRU they didn't need their top men. 100% cons
by bcoates 8y ago
The indictment doesn't assert an APT, just plain-old spearphish, steal password, install backdoor. If this was the GRU they didn't need their top men. 100% consistent with the "it could have been anybody, and probably multiple attackers got in" theory.
Note that the communications with the politicians and reporters are all a month or more after the leaks and their contents were public knowledge.
- wahern 8y agoThe backdoors (plural) were continuously relaying to a command+control server for a period of months. APT is justifiable as it refers to the entire process--coordinated penetration, continuous monitoring, and repeated exfiltration. Furthermore, the public leaks _began_ before much of the direct communication, but the direct communication included material that had not yet been publicly leaked. The public leaks didn't occur all at once. They were staged to maximize impact.