Jak Rosjanie hackowali amerykańskie wybory. Raport Muellera

Raport Roberta Muellera dostępny jest tutaj (część pierwsza; ewentualnie w nieco ładniejszej formie tutaj). Nie będziemy recenzować całego kilkusetstronicowego dokumentu, choć na pewno warto zwrócić uwagę na często dość proste / tanie do przeprowadzenia ataki typu SQL injection:

By at least the summer of 2016, GRU officers sought access to state and local computer networks by exploiting known software vulnerabilities on websites of state and local governmental entities. GRU officers, for example, targeted state and local databases of registered voters using a technique known as „SQL injection,” by which malicious code was sent to the state or local website in order to run commands (such as exfiltrating the database contents). In one instance in approximately June 2016, the GRU compromised the computer network of the Illinois State Board of Elections by exploiting a vulnerability in the SBOE’s website. The GRU then gained access to a database containing information on millions of registered Illinois voters, 189 and extracted data related to thousands of U.S. voters before the malicious activity was identified.

Tego typu fragmentów jest cała masa – ot kolejny zwykły dzień i bum – mamy malware w firmie wspierającej proces zarządzania listami wyborczymi:

Unit 74455 also sent spearphishing emails to public officials involved in election administration and personnel at companies involved in voting technology. In August 2016, GRU officers targeted employees of […..] , a voting technology company that developed software used by numerous U.S. counties to manage voter rolls, and installed malware on the company network.

Część dokumentu jest ocenzurowana, czasem lekko (z zasadzie tylko przypisy):

Mueller report

Czasem ciężej:

–ms