author photo
By SecureWorld News Team
Mon | Apr 23, 2018 | 11:52 AM PDT

The U.S. Democratic National Committee is suing the Trump campaign over the Russian hack on DNC servers.

And buried on page 22 of the lawsuit are some interesting revelations about how deep into the DNC network hackers had gotten and what the DNC had to do to stop the attack.

Here is the list:

  • The DNC hack forced 140 servers to be decommissioned
  • The DNC hack forced 11 servers to be rebuilt
  • The DNC hack damage required 180 computers to have all software and operating systems removed and re-installed

dnc-hacker-lawsuit

The lawsuit says forensic analysis by CrowdStrike determined a number of things. For one, Russian hackers known as Cozy Bear infiltrated the DNC's network around July 27, 2015, and camped out there.

For another thing, "CrowdStrike determined that the objective of the Cozy Bear actor was to access and collect information from DNC systems that were primarily used for communications. The analysis identified Cozy Bear malware in DNC systems providing email, email support, backup servers, voice over internet protocol, and chat."

So that's something else that is news from the lawsuit. We are talking about more than just hacked emails. They were listening to VOIP calls and voicemails and monitoring chats.

Also, a second group of Russian hackers, Fancy Bear GRU, was found to have hacked the DNC. "CrowdStrike determined that the GRU's objective was to collect information about the DNC's political and research activities. On April 22, 2016, the GRU staged for exfiltration several gigabytes of data that included opposition research on Donald Trump."

Comments