NSA claims Russia hacked voting systems

Russia’s military intelligence agency attempted to hack the computers of U.S. voting officials in the days before the 2016 presidential election, according to a leaked National Security Agency (NSA) report


ANATOMY OF SPEAR-PHISHING ATTACK

Hacker allegedly affiliated with Russia’s Main Intelligence Directorate

ADVERSARY SPACE

1 Creates new email account using data from “cyber espionage operations” against targeted company

2 Crafts fake email

Email mimics Google Alert, relating to purported issue with targeted employee’s account

3 Sends email

Employee enticed to click on malicious link within email

VICTIM SPACE

4 Clicks link and enters credentials 
Victim also gives phone number and Google verification code if two-factor authentication (2FA) is enabled

5 Gathers credentials

Hacker-controlled website closely resembling Google webmail page

Operational infrastructure

NEUTRAL SPACE

6 Credentials give hacker opportunity to access

Targeted company systems

7 Steals data of interest


Seven email accounts at U.S. election software firm targeted – at least one likely compromised. Not known if hacking affected election results


Sources: The Intercept, Associated Press 

© GRAPHIC NEWS