Rosjanie hackowali organizacje antydopingowe – USA postawiła zarzuty agentom GRU

Obszerne wyjaśnienie zarzutów można znaleźć tutaj:

Today we are indicting seven GRU officers for multiple felonies each, including the use of hacking to spread the personal information of hundreds of anti-doping officials and athletes as part of an effort to distract from Russia’s state-sponsored doping program.

Techniki były różne – od klasycznych kradzieży loginów i haseł do systemów zawierających wrażliwe dane:

(…), the conspirators began targeting systems used by international anti-doping organizations and officials.  After compromising those systems, the defendants stole credentials, medical records, and other data, including information regarding therapeutic use exemptions (TUEs), which allow athletes to use otherwise prohibited substances.

Aż do przejmowania sieci WiFi:

maintaining persistent access to Wi-Fi networks used by anti-doping officials.

Po co realizować tego typu ataki? Do „zwykłego” pozyskiwania danych:

In December 2016 and January 2017, conspirators successfully compromised the networks of IAAF and the Fédération Internationale de Football Association (“FIFA”) and targeted computers and accounts used by each organization’s top anti-doping official.  Among the data stolen from such officials were keylogs, file directories, anti-doping policies and strategies, lab results, medical reports, contracts with doctors and medical testing labs, information about medical testing procedures, and TUEs.

A tego typu dane… sami możecie pomyśleć do czego mogą zostać wykorzystane. No dobrze, trochę podpowiemy, np. można nieco zmodyfikować pewne dokumenty:

 In some instances, the WADA documents were modified from their original form.

Czy przez publikację stosownych informacji – odwracać uwagę mediów od „innych problemów”

In the case of four-time Olympic gold medalist runner Mo Farah, the Fancy Bears’ Hack Team had gained access to his “biological passport.” This set of information tracks the blood data of athletes in order to monitor the potentiality of doping. The group then posted the contents of Farah’s profile over social media, pointing to results that claimed he was “likely doping.”

Głębiej zainteresowanych tematem odsyłam do opracowania opublikowanego przez departament sprawiedliwości USA.

–ms