Russian hackers from the group known as "Fancy Bear" are targeting the U.S. Senate with a new espionage campaign, according to cybersecurity firm Trend Micro.
The Tokyo-based cybersecurity group tells The Hill that it has discovered a chain of suspicious-looking websites set up to look like the U.S. Senate's internal email system, and learned that the sites were being operated as part of an email-harvesting operation.
The websites were reportedly set up by Fancy Bear, a group linked to Russia's military intelligence agency, the GRU. The group has been implicated in the hack of the Democratic National Committee ahead of the 2016 presidential election.
The Associated Press first reported Trend Micro's findings.
The tactic used by Fancy Bear's hackers to obtain Senate emails is "identical" to an operation carried out against French President Emmanuel Macron during the French elections last year, which led to the publication of Macron's campaign emails two months later.
"That is exactly the way they attacked the Macron campaign in France," Feike Hacquebord, an analyst at cybersecurity firm Trend Micro said.
"We are 100 percent sure that it can be attributed to the Pawn Storm group," said another analyst at the firm, using another code name for the Fancy Bear hacking group.
The websites targeting the U.S. Senate were set up in June and September of 2017. The Senate Sergeant at Arms office, which handles security for the upper chamber, declined to comment to the AP for the story.
This isn't the first time the Senate has been targeted by hackers. In 2015 and 2016, the AP reports that a number of congressional staffers were targeted by malicious actors, including a top advisor to Florida Sen. Marco Rubio (R) and a former chief of staff to Senate Majority Leader Mitch McConnell (R-Ky.)
On Wednesday, the hacking group released emails targeting Olympic organizations, just weeks before the beginning of the 2018 Winter Olympic Games in Seoul, South Korea.
The hackers reportedly hit Olympic organizations with the same tactic used on the Senate. A separate cybersecurity firm discovered fake websites imitating the World Anti-Doping Agency, the U.S. Anti-Doping Agency, and the Olympic Council of Asia.
"These suspicious domains have consistencies with other previously identified Fancy Bear infrastructure and raise the question of a broader campaign against the upcoming 2018 winter games," cybersecurity firm ThreatConnect said.
"At this time, we cannot confirm whether these domains have been used maliciously nor definitively tie them to Fancy Bear without additional data," the firm said. "ThreatConnect has notified the spoofed organizations."
Not indicating that the content you copy/paste is not your original work could be seen as plagiarism.
These are some tips on how to share content and add value:
Repeated plagiarized posts are considered spam. Spam is discouraged by the community, and may result in action from the cheetah bot.
Creative Commons: If you are posting content under a Creative Commons license, please attribute and link according to the specific license. If you are posting content under CC0 or Public Domain please consider noting that at the end of your post.
If you are actually the original author, please do reply to let us know!
Thank You!
More Info: Abuse Guide - 2017.
Hi! I am a robot. I just upvoted you! I found similar content that readers might be interested in:
https://www.youtube.com/watch?v=l5Sau28ZwH4Congratulations @david18! You received a personal award!
Click here to view your Board
Congratulations @david18! You received a personal award!
You can view your badges on your Steem Board and compare to others on the Steem Ranking
Vote for @Steemitboard as a witness to get one more award and increased upvotes!