Anonymous ID: 40285a July 1, 2021, 8:34 a.m. No.14029804   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun

https://therecord.media/fbi-nsa-russian-military-cyber-unit-behind-large-scale-brute-force-attacks/

 

US and UK cybersecurity agencies said today that a Russian military cyber unit has been behind a series of brute-force attacks that have targeted the cloud IT resources of government and private sector companies across the world.

 

The attacks have been linked to a hacking group tracked as APT28, or Fancy Bear, in a series of joint security advisories published today by the US National Security Agency (NSA), the US Cybersecurity and Infrastructure Security Agency (CISA), the US Federal Bureau of Investigation (FBI), and the UKโ€™s National Cyber Security Centre (NCSC).

 

The four security agencies said that the brute-force attacks are only the beginning of an APT28 attack.

The agencies said the GRU hackers utilized the successfully compromised accounts to pivot internally inside the hacked organizations.

In particular, the agencies said that APT28 used the compromised account credentials in conjunction with exploits for Microsoft Exchange servers like CVE-2020-0688 and CVE-2020-17144, combining the two to gain access to internal email servers.

 

CISA, FBI, NSA, and NCSC officials said the groupโ€™s attacks had remained largely under the radar because APT28 worked to disguise its brute-forcing attempts via the Tor network or commercial VPN services, such as CactusVPN, IPVanish, NordVPN, ProtonVPN, Surfshark, and WorldVPN.

Anonymous ID: 40285a July 1, 2021, 8:44 a.m. No.14029859   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun

The NSA says that between November 2020 and March 2021, the hackers conducted brute force attacks without using an anonymization service, exposing the following IP addresses as being used by the Russian GTsSS' Kubernetes cluster:

 

158.58.173[.]40

185.141.63[.]47

185.233.185[.]21

188.214.30[.]76

195.154.250[.]89

93.115.28[.]161

95.141.36[.]180

77.83.247[.]81

192.145.125[.]42

193.29.187[.]60

Anonymous ID: 40285a July 1, 2021, 9:29 a.m. No.14030144   ๐Ÿ—„๏ธ.is ๐Ÿ”—kun

Rep. Marjorie Taylor Greene is over the target

 

https://thehill.com/homenews/house/561127-house-democrats-call-on-mccarthy-to-take-immediate-action-on-taylor-greene

 

A group of nearly 40 House Democrats signed a letter to House Minority Leader Kevin McCarthy (R-Calif.) on Thursday, calling on him "in the strongest terms to take immediate action" to address Rep. Marjorie Taylor Greene's (R-Ga.) behavior.

 

In their letter, the representatives pointed to the various disputes that she has had with Democratic colleagues since assuming offices.

 

The letter was signed by Rep. Pramila Jayapal (Wash.) along with fellow Democratic Reps. Bush, Ocasio-Cortez, Joaquin Castro (Texas), Ilhan Omar (Minn.), Katie Porter (Calif.) and over 30 others.

 

Greene released a statement on Thursday apparently responding to the letter: "Itโ€™s absurd Democrats accuse me of creating an environment of harassment for speaking at a Trump rally and defining them as who they are: Communists," "I receive constant harassment in public caused by the Democrat lies promoted by the media," she added. "Democrats singled me out and kicked me off committees for doing nothing wrong, and the death threats havenโ€™t stopped since. And now the witch hunt continues in an attempt to overturn my 2020 election and kick me out of Congress."