Now that the election is over, the Russian teams of hackers suspected of breaking into the Democratic Party's systems have reportedly launched a new phishing attack on US political think tanks and non-government organizations. Incident response firm Volexity has compiled information on "The Dukes" (aka APT29 or Cozy Bear) that it believes are behind the attacks. This time around, they worked by posing as a Harvard professor, sending links to Microsoft Office Word or Excel documents that contained a macro used to install a malware downloader on that target's computer. Once installed, it downloads a PNG file that has a backdoor embedded via steganography.
Following the Washington election, Russian hackers suspected of breaching the Democratic Party’s systems have reportedly launched phishing attacks on Washington political think-tanks and NGOs. The emails contained startling headlines which linked to compromised MS Office Word or Excel documents. Cybersecurity firm AlienVault believes the hackers are rushing to gain a clear insight as to what is going on in US after the surprise election of Donald Trump.