Thursday, January 22, 2015

Humpty Dumpty sat on the Kremlin – BBC

Humpty Dumpty sat on the Kremlin – BBC

The group “Anonymous International” has posted on the network another batch of documents, which they presented as correspondence from the department of internal policy of the Presidential Administration of Russia, as well as put up for sale correspondence press secretary Dmitry Medvedev Natalia Timakova. A government source indicated that was hacked mailbox on a closed domain gov.ru, which caters to the FSO.

Recent publications “International” contains documents with reports on monitoring of social networks and the actions of the opposition. According to the “International” Lewis, these documents are intended for Timur Prokopenko, deputy head of the department of internal policy of the Presidential Administration, which oversees Vyacheslav Volodin. Writes in a commentary for publication Humpty, letters Prokopenko reports on the results of actions to combat the opposition.

The next blog post group “proves to be a cynical characters, working on one of the” towers of the Kremlin, “ironically” Humpty “. It hackers announce an auction for arrays of letters Natalia Timakova, a spokesman for Prime Minister Dmitry Medvedev. Approximately 500 messages they want to sell under the hammer at the “International exchange of classified information».

In the summary of the correspondence lined several letters, including tips allegedly former head of RIA “Novosti” Svetlana Myronyuk, photos Dmitry Medvedev with the general Director of Channel One Konstantin Ernst, correspondence meeting with the former head of “Vkontakte” Paul Durov and reaction to the movie about her husband Timakova.

Commenting on the “Gazeta.ru” the situation with the auction of letters Timakova, a representative of the International notes that this not the first time sales information.

«Certainly, auction arranged for the money. We no tower of the Kremlin does not pay. We earn for themselves and for the projects themselves. Try on pure enthusiasm exercise our activities, pay sources, give the opportunity to live somehow technicians, give the opportunity to Humpty Dumpty and move from country to country. At any money to do it? Look how much we collected during the lifetime of the project in our Bitcoin wallet. And we did not hesitate and will not hesitate, if you decide to sell something. We do not take money from the Kremlin and not build a two-faced game. Let the shy ones who portrays regime fighters, but in fact take the loot from the AP, “- says Lewis.

According to him,” corresponded almost no privacy. ” “Only work, informal working correspondence, – says Lewis. – Why is there no criminal case? Ask the Investigative Committee. Maybe because there are no applicants? ».

« Cynical Robin Hoods »
« Anonymous International “became known after in December 2013, a few hours before the New Year’s speech, Vladimir Putin, has published his speech. Later on their website appeared correspondence from the State Duma, the White House, the presidential administration and close to the Kremlin structures. One of the most notorious episodes of activity – hacking twitter Prime Minister Dmitry Medvedev, who took responsibility for the group.

Many noticed that public officials are very sluggish to respond to breaking.

Visible efforts exerted only “Roskomnadzor”, and in July 2014 immediately after the publication of the alleged messages from a personal mailbox, Russian Deputy Prime Minister Arkady Dvorkovich, the blog was shut down by the decision of the district court Smolninskiy St. Petersburg .

A spokesman for “Anonymous International” said “Gazeta.ru” that the band members are working in IT, and the like plum – only incidental aspect of their activities. Information they receive from disgruntled presidential administration and family structures, and the use of hacking, spying and other methods of extracting information.

«We do not have any goals. We lay out what we think is necessary and often not guided by market conditions and their own considerations. FSB and the Interior Ministry and Federal Security Service have really searched and not found. It happens. And not only the contact. We are tired already convinced that we do not APshnye (employees of the presidential administration. – “Times”). Rather cynical “Robin Hoods” – said Lewis “Gazeta.ru».

According to him, to them another 10 thousand. Letters and about 40 thousand. fragments SMS correspondence employees of domestic policy of the presidential administration.

Who is behind the mask
Many media led version of that for the “Internationale” can stand people associated with the first deputy head of the presidential administration Alexei Gromov. Professor MGIMO Valery Solovey answered the question about the possibilities of the customer “plum”, “Dumpty working on someone who does not pop up in their revelations. A more active (group) because once again revived the fight for the government. I would look for the beneficiaries among those conventionally called government, or system, liberals. While more and more hit by Volodin and, in general, the supporters of the “hard line”, – said the expert.

According to him, “If surfaced Gromov (defendant became” sinks. “-” Times ” ), it can be a grouping of Defense Minister Sergei Shoigu and Senator Yuri Vorobyov. And Deputy Prime Minister Arkady Dvorkovich and Deputy Prime Minister Igor Shuvalov (in fact, the information on them appeared, however, is not compromised. – “Times») ».

Political analyst Konstantin Kalachev believes that

while the “Internationale” works on its own brand, which needs activity and quoting.

«No super-disclosures have not yet been . Perhaps it’s a gun on the desired target has not yet been shot. For now, just draw attention by shooting into the sky. And guess who is behind them – a thankless task. There is a promotion, but the climax should come later, “- said the expert.

The authorities blocked websites and accounts” Bolt “in social networks, but was not officially initiate criminal proceedings on the fact of burglary mail or internal correspondence, notes Kalachev.

«Because there is a will, would have already found the attackers and condemned. It appears that no such desire. And in the OHR, apparently a common grave concern not. Experiencing those who offend plums. On the other hand, the same plum and update them. The public was given the opportunity to look through the keyhole. As well visible corridor, but all the fun in the kitchen and bathrooms, “- explains Kalachev.

A close source to the AP” Gazety.Ru “suggested that” Humpty ” created by pro-government commercial office: capacity, technology or someone from IT people a broad plan, close to the administration and the security services.

«This is a business, having the right connections and customers both in the government and in business area, and in the latter, I think, to a greater extent. They positioned themselves on the public to go to them customers. Home work – commercial: compromising personal data, commercial correspondence. Audience – one or the other business, including spin doctors. This is a fairly well-known type of businessman – collector and seller information. To create a serious advertising, they gave themselves that’s so important. At the same time, and the towers (various factions in the Kremlin. – “Times”) can work, “- says the source.

According to him, in Russia’s entire domestic policy and political planning of the 1990s” succumbed to the power and impact of technology, earned his millions in the gubernatorial and federal elections with the participation of the oligarchs. Therefore, the source must be sought in the same environment ».

According to the source,” it is quite possible participation “presidential aide Vladislav Surkov, the handwriting-like” top secret, coming out of nowhere, mysticism, but at the same time explicit access to inside information, – says the source. – We have a few really powerful and influential technologists except Surkov. Only in principle and combines extensive connections in the world of technology, informatsionschikov, media people and at the same time in the security ».

Version” Robin gudstva “at the junction with commercial interests adheres Glavred Theins.ru Roman Dobrokhotov, who regularly publishes the contents of the hacked accounts. “They explained (in the January interview with” Medusa “) that their business – is to work with getting information. A political showdown for these types of hobbies. Talk about the tower – is nonsense, they all passed. Yes and no towers in the Kremlin, everything for themselves. (In the “International”) different people and everyone on something else earns, such as plum bring them pleasure. And money, too – right now Timakov sell “- explains the journalist.

We should not exclude the version that with” plum “” The Internationale “signals the persons involved in them,” hinting “on voluntary funding.

technical aspects and criminal risks
The press service of the government after the news of the break-mail Natalia Timakova declined to comment.

Source in the Cabinet notes that opened mail in a closed domain gov.ru, which caters to the FSO. Accordingly, any e-mail is not protected properly, or those who provide its technical protection, is the “Humpty Dumpty,” concludes the source “Gazety.Ru».

Previously, civil servants are forbidden to use for official correspondence conventional mail servers, but, according to Lewis, many employees of power structures that do not comply with the ban.

Government domain .gov, guarded FSO does not guarantee protection from burglary, said Ilya Sachkov, CEO Group-IB, which investigates cyber-crimes. According to him, the Windows operating system and connection to the network already poses a threat. The computer does not become safer if it begin to protect the FSO and the algorithm of infection remains the same.

«There are classic ways to infect computers. Any email with an attachment in doc or pdf, to gain access to the session or administrator rights. Most likely, the attackers gained access to the session and simply seized the mail. If they have access to a computer, it could be much more evil – or interesting things, as anyone – do “- says Sachkov.

According to him, the Russian state security service one of the best in the world, but and they can not do anything with the human factor.

«With staff need to have a talk about the technical safety, – the net. – Most break-ins occur because of ignorance of the user basic things ».

Head of technical and marketing support ESET Russia Alexey Os’kin specifies that

in case of burglary mailbox from the user, post on gov.ru is not significantly different, for example, by mail to gmail.som.

In order to protect your data, it is necessary to observe the usual precautions: use complex passwords recurring not passed on to third parties, establish a reliable software, antivirus programs, monitor their timely updating.

«Pay attention to whether such measures in this case, we do not know. In addition, organizations can deploy additional precautions – for example, a ban on remote access to working papers. Such measures are introduced on the initiative of the company, and in our case – FSO employees, “- says Os’kin.

However, according to the deputy head of the laboratory of computer forensics company Group-IB, Sergei Nikitin, in the case described it, not talking about breaking the mail server, and even e-mail account.

According to the expert, presumably, was infected computer, tablet or smartphone Natalia Timakova.

«If you look at the address laid out in the open access of letters, one can see that they are taken from multiple email accounts belonging Timakova. As a rule, this suggests that the mail is not stolen from the mail server, and a device of the user. Infect a user’s computer is not too difficult. For example, attackers could send a phishing email containing a link to an infected site or use any other way, and they are many, “- said Nikitin.

As pointed Sachkov only guess why the” Anonymous International ” so long remains uncaught. “There is no perfect crime. Close to ideal, for example, the hidden facts of industrial espionage – infected computer, no one said, threw the laptop in the river and left the country – gives an example net. – And then people talk to the press, they have a whole team, they leave many traces. Therefore, I think if there was a challenge to catch them, it would have already been done. Therefore, there are only conspiracy theories ».

On the questions of” Humpty “from” Gazety.Ru “why him under the guise of journalists can not see live FSB and SVR, the caller replied that carefully filters out people before the meeting. However, we should not forget that the security services have all the opportunities for surveillance and monitoring of all types of electronic communication.

According to the law, the actions of the “Internationale” a criminal offense. Hacking falls under Article 272 of the Criminal Code – “Illegal access to computer information”. In the third part of the article refers to the burglary committed by an organized group and by prior agreement, it threatens imprisonment for up to 5 years.

LikeTweet

No comments:

Post a Comment