3 ms·
There is not much substance to this statement except a lost of affected branches. What’s the point?
by TedDoesntTalk 5y ago
There is not much substance to this statement except a lost of affected branches. What’s the point?
- throwawayboise 5y agoIt was on a checklist. Statement issued, check marked, day's work done.
- mingus88 5y agoWhat are you guys expecting? A complete dissection of the government’s network topology, and detailed inventory of past and future mitigations? These are classified gov systems. We are lucky to get an acknowledgment that something even happened.
- TedDoesntTalk 5y agoGood points. Maybe I expected to learn more details but given your comments, that doesn’t make sense.
- Spooky23 5y ago> While other districts were impacted to a lesser degree, the APT group gained access to the O365 email accounts of at least 80 percent of employees working in the U.S. Attorneys’ offices located in the Eastern, Northern, Southern, and Western Districts of New York. Think about what is unique about these districts. What was going on between May and December that an “actor” or a downstream information consumer might want to know about?
- spfzero 5y agoIt still works as a random fishing expedition as well though. There were certainly lots of legal strategy messages that would be very valuable to the subjects of investigations or ongoing cases. Some of those subjects may be initially ignorant they were even on the radar yet. Some of those would be very wealthy and willing to pay for the information.
- Spooky23 5y agoIt might. If it were just the Southern district, sure. But Albany (Northern) and Buffalo (Western) are sleepy backwaters for random walks through prosecutor email. Who or what would a threat actor want to know about in Albany or Buffalo last year?