Comments
Jailed Hacker Claims Proof He Breached DNC on Russia's Orders
Newest First  |  Oldest First  |  Threaded View
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
1/4/2018 | 8:34:31 AM
Re: And if the DNC had allowed real investigators...
Best comeback ever.  
SchemaCzar
50%
50%
SchemaCzar,
User Rank: Strategist
1/3/2018 | 3:48:43 PM
Re: And if the DNC had allowed real investigators...
You just forced me to have sympathy on hackers...
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
1/3/2018 | 1:15:10 PM
Re: And if the DNC had allowed real investigators...
I cannot help but get a chuckle out of this one --- what if all the Russians managed to gain access to were text files of Anthony Weiner's sexting chats????
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/31/2017 | 9:59:21 PM
Re: Not Surprising
Russian and Eastern European hackers have a long history of having an "understanding" with government officials -- having their consent to turn a blind eye if not their direct blessing, so long as they keep their activities away from fellow citizens. That's at the very least.

In other cases, it has been known in the intelligence community that Russian government officials outright work with independent black hats (as with other governments). I suspect that this proof, if it turns out to be actual proof, will get a lot of attention in the public, but in terms of actual policy will not mean a heck of a lot because it's old news to the people whose job it is to do things about it.
SchemaCzar
100%
0%
SchemaCzar,
User Rank: Strategist
12/29/2017 | 11:02:23 AM
And if the DNC had allowed real investigators...
DNC's hiring of CrowdStrike and refusal to allow FBI digital forensics to investigate makes this impossible to pursue.  The dishonesty of claiming Russian hacking and its damage to US democracy while not bringing it to Federal investigation now leaves us blind in dealing with Kozlovsky and his allegations.  For me - I don't believe the claims.  The FSB has plenty of its own resources and an ability to cover its tracks that makes using an outsider completely unnecessary, and risky.  A free-wheeling, free-travelling robber like Koslovsky is even worse.  Perhaps Koslovsky believes he was engaged by the FSB - as if he cared who paid him - but I don't.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/29/2017 | 7:32:42 AM
Not Surprising
This isn't surprising in the least that this could have been performed with the backing of a nation-state. The question is, definitely proving this to be the case what would be the recourse?


12 Free, Ready-to-Use Security Tools
Steve Zurier, Freelance Writer,  10/12/2018
Most IT Security Pros Want to Change Jobs
Dark Reading Staff 10/12/2018
Most Malware Arrives Via Email
Dark Reading Staff 10/11/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17534
PUBLISHED: 2018-10-15
Teltonika RUT9XX routers with firmware before 00.04.233 provide a root terminal on a serial interface without proper access control. This allows attackers with physical access to execute arbitrary commands with root privileges.
CVE-2018-17980
PUBLISHED: 2018-10-15
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is execute...
CVE-2018-18259
PUBLISHED: 2018-10-15
Stored XSS has been discovered in version 1.0.12 of the LUYA CMS software via /admin/api-cms-nav/create-page.
CVE-2018-18260
PUBLISHED: 2018-10-15
In the 2.4 version of Camaleon CMS, Stored XSS has been discovered. The profile image in the User settings section can be run in the update / upload area via /admin/media/upload?actions=false.
CVE-2018-17532
PUBLISHED: 2018-10-15
Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and hotspotlogin.cgi due to insufficient user input sanitization. This allows remote attackers to execute arbitrary commands with root privileges.