It's a move committed to muscle memory, as they've had to execute it against 84 sites (ran by APT 28) prior.ĭavid Tell of the Hudson Institute, one of the victims, remarked “This kind of stuff does happen. In other cases, the site would solicit the visitor to deposit information that could then be later used for future attacks or coordinated manipulation efforts.Īfter the Microsoft’s Digital Crimes Unit (DCU) detected the beginnings of a malicious campaign, Microsoft used a previously successful tactic of getting court ordered access to the domains to transfer them to their own servers, research them, and shelve them. The purpose of these sites were to direct traffic to malicious locations where unsuspecting visitors would pick up various forms of malware.
Out of the six sites, four of them contained Microsoft related verbage in their domain names, such as "sharepoint", "adfs", "office365", and "onedrive". Yet, this time they were not successful in their attempts.Īccording to the Washington Post coverage, this group created several sites in the last 2-4 months mimicking the Hudson Institute (a conservative Washington think tank active in investigations of corruption in Russia), the International Republican Institute (IRI), several fake entities claiming affiliation with the Senate, and one of Microsoft’s own online products. The organization has received extensive coverage recently because of its direct ties to the 2016 Presidential Election.
In the spirit of Atlanta Hawks great, Dikembe Mutombo, Microsoft denied the Russian sponsored hacking group APT28, which is also referred to as Strontium or Fancy Bear.
0 kommentar(er)
