12 ms·
ThreatConnect source: https://threatconnect.com/blog/building-out-protonmail-spoofed-infrastructure/ https://threatconnect.com/blog/building-out-protonmail-spoo
by ga-vu 7y ago
ThreatConnect source: https://threatconnect.com/blog/building-out-protonmail-spoofed-infrastructure/ https://threatconnect.com/blog/building-out-protonmail-spoof...
The article glosses over attack details and mumbles about 'Russia is bad' for three-quarters of the text
- nkozyra 7y agoI don't understand why you take onus with the Russian state/Fancy Bear aspect of the story. They seem to be addressed in the same spirit in both articles.
- vuln 7y agoIt you look at the indicators of compromise that law enforcement shared on Fancy Bear and Grizzly Steppe you would notice that a large portion of the IP address are tied to VPN providers like Hide My Ass. Attribution is very very very hard. https://krebsonsecurity.com/2017/08/blowing-the-whistle-on-bad-attribution/ https://krebsonsecurity.com/2017/08/blowing-the-whistle-on-b...