Hackers belonging to the Fancy Bear group did not just go after former US secretary of state Hillary Rodham Clinton’s presidential campaign.
They tried to break into the private e-mail of then-US secretary of state John Kerry, attempted to steal the private correspondence of a manager working on Lockheed Martin’s stealth fighter program and sought to break into the accounts of thousands of others, including the punk band Pussy Riot and Russian opposition leader Alexei Navalny.
About 19,000 lines of data, recently shared by cybersecurity firm Secureworks, show that Fancy Bear — the hacking group blamed by US intelligence agencies for disrupting last year’s presidential election — tried to break into more than 4,700 Gmail inboxes in at least 116 countries between March 2015 and May last year.
It is effectively a hit list — one that experts said points to the Kremlin.
“There is only one country whose interests this list would serve,” said Keir Giles, director of the Conflict Studies Research Center in Cambridge, England, and one of five experts who reviewed the findings of an Associated Press investigation.
“Regardless of the inevitable denials from Moscow, it is the only explanation that makes sense,” he said.
Russian officials have described claims that they orchestrated the hacking as “ludicrous” and “verging on fantasy.”
On Wednesday, Russian Deputy Minister of Foreign Affairs Sergei Ryabkov said there was “not a single piece of evidence” to back the allegations.
However, the Fancy Bear targets identified by reporters tell a different story. In more than 100 interviews, many blamed Moscow for the hacking.
“We have no doubts about who is behind these attacks,” said Artem Torchinskiy, a Navalny lieutenant who was targeted by Fancy Bear in 2015. “I am sure these are hackers controlled by Russian secret services.”
The largest groups of targets were in the US, Ukraine, Russia, Georgia and Syria. The hackers tried to compromise employees of major US defense contractors and attempted to steal the e-mails of Kerry and former US Army general Wesley Clark.
Also on the list were more than 130 US Democrats and members of Clinton’s inner circle, including Clinton campaign chairman John Podesta, whose correspondence was leaked in the closing days of the presidential race.
In response to reporting by the AP, the US Democratic National Committee Thursday issued a statement saying the evidence that Russia had interfered in the election was “irrefutable.”
Fancy Bear also tried to hack a swath of Ukrainian politicians, including Ukrainian Legislator Serhiy Leshchenko, who helped uncover the off-the-books payments allegedly made to Trump campaign chairman Paul Manafort.
Islamist rebels fighting the Russia-backed government of Syrian President Bashar Assad were targeted, too, as was Pussy Riot’s Maria Alekhina.
Vasily Gatov, a US-based Russian media analyst who was among those targeted by Fancy Bear, said the list provides a global context to the hack of the Democrats early last year.
“It complements the puzzle,” said Gatov, who was initially skeptical of the idea that Russian intelligence had singled out the Democrats. “Now I’m convinced.”
Allegations that Fancy Bear works for Russia are not new. However, raw data has been hard to come by. The US intelligence community has made little proof available publicly.
The hit list made its way to the AP after Secureworks stumbled upon a Bitly account being used by Fancy Bear to craft its malicious e-mails.
Over the course of its reporting, the AP found a direct line from Fancy Bear to the leaks that rocked the presidential contest in its final stages.
All the Democrats whose private correspondence was published in the run-up to the election had previously been targeted by Fancy Bear, either at their professional Gmail addresses or through the DNC, the AP found.
Even if only a fraction of the 4,700 Gmail accounts targeted by Fancy Bear were successfully hacked, the data drawn from them could run into terabytes — putting the operation in the same league as some of the largest leaks in journalistic history.
Merely identifying and sorting the targets took a team of six AP reporters eight weeks.
The AP’s effort offers “a little feel for how much labor went into this” hacking endeavor, said Thomas Rid, a professor of strategic studies at Johns Hopkins University’s School of Advanced International Studies.
He said the investigation should put to rest any theories like the one then-presidential candidate Trump floated last year that the hacks could be the work of “someone sitting on their bed that weighs 400 pounds.”
MONEY MATTERS: Xi was to highlight projects such as a new high-speed railway between Belgrade and Budapest, as Serbia is entirely open to Chinese trade and investment Serbian President Aleksandar Vucic yesterday said that “Taiwan is China” as he made a speech welcoming Chinese President Xi Jinping (習近平) to Belgrade, state broadcaster Radio Television of Serbia (RTS) said. “We have a clear and simple position regarding Chinese territorial integrity,” he told a crowd outside the government offices while Xi applauded him. “Yes, Taiwan is China.” Xi landed in Belgrade on Tuesday night on the second leg of his European tour, and was greeted by Vucic and most government ministers. Xi had just completed a two-day trip to France, where he held talks with French President Emmanuel Macron as the
With the midday sun blazing, an experimental orange and white F-16 fighter jet launched with a familiar roar that is a hallmark of US airpower, but the aerial combat that followed was unlike any other: This F-16 was controlled by artificial intelligence (AI), not a human pilot, and riding in the front seat was US Secretary of the Air Force Frank Kendall. AI marks one of the biggest advances in military aviation since the introduction of stealth in the early 1990s, and the US Air Force has aggressively leaned in. Even though the technology is not fully developed, the service is planning
INTERNATIONAL PROBE: Australian and US authorities were helping coordinate the investigation of the case, which follows the 2015 murder of Australian surfers in Mexico Three bodies were found in Mexico’s Baja California state, the FBI said on Friday, days after two Australians and an American went missing during a surfing trip in an area hit by cartel violence. Authorities used a pulley system to hoist what appeared to be lifeless bodies covered in mud from a shaft on a cliff high above the Pacific. “We confirm there were three individuals found deceased in Santo Tomas, Baja California,” a statement from the FBI’s office in San Diego, California, said without providing the identities of the victims. Australian brothers Jake and Callum Robinson and their American friend Jack Carter
CUSTOMS DUTIES: France’s cognac industry was closely watching the talks, fearing that an anti-dumping investigation opened by China is retaliation for trade tensions French President Emmanuel Macron yesterday hosted Chinese President Xi Jinping (習近平) at one of his beloved childhood haunts in the Pyrenees, seeking to press a message to Beijing not to support Russia’s war against Ukraine and to accept fairer trade. The first day of Xi’s state visit to France, his first to Europe since 2019, saw respectful, but sometimes robust exchanges between the two men during a succession of talks on Monday. Macron, joined initially by EU Commission President Ursula von der Leyen, urged Xi not to allow the export of any technology that could be used by Russia in its invasion