AiOwares
Microsoft reveals first known midterm campaign hacking attempts - Printable Version

+- AiOwares (https://www.aiowares.com)
+-- Forum: The Daily News (https://www.aiowares.com/forumdisplay.php?fid=5)
+--- Forum: Global News (https://www.aiowares.com/forumdisplay.php?fid=10)
+--- Thread: Microsoft reveals first known midterm campaign hacking attempts (/showthread.php?tid=648)

Microsoft reveals first known midterm campaign hacking attempts - tao - 07-19-2018

Microsoft detected and helped block hacking attempts against three congressional candidates this year, a company executive said Thursday, marking the first known example of cyber interference in the midterm elections.

“Earlier this year, we did discover that a fake Microsoft domain had been established as the landing page for phishing attacks,” said Tom Burt, Microsoft’s vice president for security and trust, at the Aspen Security Forum. “And we saw metadata that suggested those phishing attacks were being directed at three candidates who are all standing for election in the midterm elections.”

Burt declined to name the targets but said they were “people who, because of their positions, might have been interesting targets from an espionage standpoint as well as an election disruption standpoint.”

Microsoft took down the fake domain and worked with the federal government to block the phishing messages. Burt said that none of the targeted campaign staffers were infected.

Burt did not specify whether the hacking attempts originated from Russia.

Threat intelligence researchers at Microsoft and elsewhere are “not seeing the same level of activity by the Russian activity groups leading into the midterm elections that we could see when we look back at the 2016 elections,” Burt said.

For example, he said, Russian hackers are not targeting think tanks and academic experts like they did during the 2016 campaign.

Code:
https://www.politico.com/story/2018/07/19/midterm-campaign-hacking-microsoft-733256


RE: Microsoft reveals first known midterm campaign hacking attempts - nsan3 - 04-03-2021

If a domain is being faked, then the only way to bypass the situation is to educate their site visitors. I remember a website which I used to be a member of, issuing update emails informing about their actual domains and the domains that need to be avoided.
One example which I have seen is, the actually URL is ->
Code:
https://wex-uselo.net

and the fake one setup by hackers/spammers were ->
Code:
https://wex-useIo.net


RE: Microsoft reveals first known midterm campaign hacking attempts - BALTAGY - 04-03-2021

(04-03-2021, 06:36 PM)nsan3 Wrote: If a domain is being faked, then the only way to bypass the situation is to educate their site visitors. I remember a website which I used to be a member of, issuing update emails informing about their actual domains and the domains that need to be avoided.
One example which I have seen is, the actually URL is ->
Code:
https://wex-uselo.net

and the fake one setup by hackers/spammers were ->
Code:
https://wex-useIo.net
Coded your links, please code any external links

Thanks

RE: Microsoft reveals first known midterm campaign hacking attempts - AdobeWall - 04-03-2021

(04-03-2021, 07:02 PM)BALTAGY Wrote:
(04-03-2021, 06:36 PM)nsan3 Wrote: If a domain is being faked, then the only way to bypass the situation is to educate their site visitors. I remember a website which I used to be a member of, issuing update emails informing about their actual domains and the domains that need to be avoided.
One example which I have seen is, the actually URL is ->
Code:
https://wex-uselo.net

and the fake one setup by hackers/spammers were ->
Code:
https://wex-useIo.net
Coded your links, please code any external links

Thanks


Just curious, why is so much emphasis on putting links in codes?

RE: Microsoft reveals first known midterm campaign hacking attempts - BALTAGY - 04-03-2021

(04-03-2021, 07:09 PM)AdobeWall Wrote:
(04-03-2021, 07:02 PM)BALTAGY Wrote:
(04-03-2021, 06:36 PM)nsan3 Wrote: If a domain is being faked, then the only way to bypass the situation is to educate their site visitors. I remember a website which I used to be a member of, issuing update emails informing about their actual domains and the domains that need to be avoided.
One example which I have seen is, the actually URL is ->
Code:
https://wex-uselo.net

and the fake one setup by hackers/spammers were ->
Code:
https://wex-useIo.net
Coded your links, please code any external links

Thanks


Just curious, why is so much emphasis on putting links in codes?
Guests and new users don't see links in codes, also search engines to avoid reports and such