Cybersecurity firm says Russians hacked company key to Ukraine scandal

biden hunter
Report say during impeachment hearings Russia hacked gas company where Hunter Biden worked

A U.S. cybersecurity company says Russian military agents have successfully hacked the Ukrainian gas company at the center of the scandal that led to President Donald Trump’s impeachment.

Russian agents launched a phishing campaign in early November to steal the login credentials of employees of Burisma Holdings, the gas company, according to Area 1 Security, a Silicon Valley company that specializes in e-mail security.

Hunter Biden, son of former U.S. vice president and Democratic presidential hopeful Joe Biden, previously served on Burisma’s board.

It was not clear what the hackers were looking for or may have obtained, said Area 1′s CEO, Oren Falkowitz, who called the findings “incontrovertible” and posted an eight-page report. But the timing of the operation suggests that the Russian agents could be searching for material that damaging to the Bidens.

The House of Representatives impeached Trump in December for abusing the power of his office by enlisting the Ukrainian government to investigate Biden, a political rival, ahead of the 2020 election. A second charge accused Trump of obstructing a congressional investigation into the matter.

“Our report doesn’t make any claims as to what the intent of the hackers were, what they might have been looking for, what they are going to do with their success. We just point out that this is a campaign that’s going on,” said Falkowitz, a former National Security Agency offensive hacker whose company’s clients include candidates for U.S. federal elected offices. In an earlier interview, he told The Associated Press that top candidates for the U.S. presidency and House and Senate races in 2020 have in the past few months each been targeted by about a thousand phishing emails.

Falkowitz did not name the candidates. Nor would he name any clients.

Russian hackers from the same military intelligence unit that Area 1 said was behind the operation targeting Burisma have been indicted for hacking emails from the Democratic National Committee and the chairman of Hillary Clinton’s campaign during the 2016 presidential race.

Stolen emails were released online at the time by Russian agents and WikiLeaks in an effort to favor Trump, special counsel Robert Mueller determined in his investigation.

Area 1 discovered the phishing campaign by the Russian military intelligence unit, known as the GRU, on New Year’s Eve, said Falkowitz, who would not discuss whom he notified prior to going public. He said he followed the industry standard process of responsible disclosure, which would include notifying Burisma.

In the report, he said the GRU agents used fake, lookalike domains in the phishing campaign that were designed to mimic the sites of real Burisma subsidiaries.

Falkowitz said the operation targeting Burisma involved tactics, techniques and procedures that GRU agents had used repeatedly in other phishing operations, matching “several patterns that lots of independent researchers agree mimic this particular Russian actor.” Area 1 says it has been tracking the Russian agents for several years.

The discovery’s timing — just weeks before presidential primaries begin in the United States — highlights the need to protect political campaigns from targeted phishing attacks, which are behind 95 percent of all information breaches, said Falkowitz.

“This is a real specific, timely case that has real implications,” he said. “To discover it and potentially get out in front of it is a significant departure from what’s typical in the cyber security community, where someone just tells you, yeah, you’re dead.”

In phishing, an attacker uses a targeted email to lure a target to a fake site that resembles a familiar one. There, unwitting victims enter their usernames and passwords, which the hackers then harvest. Phished credentials allow attackers both to rifle through a victim’s stored email and masquerade as that person.

Area 1 said its researchers connected the phishing campaign targeting Burisma to an effort earlier last year that targeted Kvartal 95, a media organization founded by Ukrainian President Volodymyr Zelenskiy.

In this case, the Russian military agents, from a group security researchers call “Fancy Bear,” peppered Burisma employees with emails designed to look like internal messages.

In order to detect phishing attacks, Area 1 maintains a global network of sensors designed to sniff out and block them before they reach their targets.

In July, the U.S. Federal Elections Commission gave Area 1 permission to offer its services to candidates for federal elected office and political committees at the same low rates it charges non-profits.

Associated Press


One comment

  • John Kociuba

    January 14, 2020 at 10:12 am

    Dear Citizens ~

    This has NOTHING to do with President Donald John Trump’s investigation into corrupt Joe Biden and Hunter Biden! Nothing! Yes. Notice hiw the piece tells you absolutely nothing about ongoing Burisma investigation.

    Rockefeller Republicans like Mitt Romney, George H. W. Bush, George W. Bush, Clinton, Obama, Menshevik Communist Democrats have FLEECED our U.S. Treasury for decades using false military flags from foreign nationals!

    Yes. Remember “George H.W. Bush’s” funeral? Guess who wasn’t invited? HON. PRESIDENT DONALD JOHN TRUMP!

    Both political establishment parties are COMMUNIST PARTIES and only Hard Right Republicans have the knowledge and fortitude to overthrow them!

    Are you aware Hon. President Donald John Trump is NOT impeached! The Senate has to vote! Are you aware how many laws were violated in the DNC Kangaroo Court of Congress?

    Furthermore under the Constitution, the United States Senate must refuse Nancy Pelosi’s “Article” due to “Imminent Lawless Actions!”

    Bancy Pelosi and her Commie friends should be arrested & interrogated Immediately!

    Moreover the entire Senate Unintelligible Committee should be arrested snd DISBANDED for their role in Afghanistan (Randpaul.com)

    Floridapolitics is a leftist feed that must be counterbalanced at every turn!

    ILLEGAL IMMIGRANTS VOTING IS THE REAL ELECTION TAMPERING & COLLUSION!

Comments are closed.


#FlaPol

Florida Politics is a statewide, new media platform covering campaigns, elections, government, policy, and lobbying in Florida. This platform and all of its content are owned by Extensive Enterprises Media.

Publisher: Peter Schorsch @PeterSchorschFL

Contributors & reporters: Phil Ammann, Drew Dixon, Roseanne Dunkelberger, A.G. Gancarski, Anne Geggis, Ryan Nicol, Jacob Ogles, Cole Pepper, Gray Rohrer, Jesse Scheckner, Christine Sexton, Drew Wilson, and Mike Wright.

Email: [email protected]
Twitter: @PeterSchorschFL
Phone: (727) 642-3162
Address: 204 37th Avenue North #182
St. Petersburg, Florida 33704




Sign up for Sunburn


Categories