Cozy Bear and Fancy Bear: did Russians hack Democratic party and if so, why?

Cozy Bear and Fancy Bear: did Russians hack Democratic party and if so, why?

In April of last year, at 10pm on a Wednesday, French network TV5Monde suddenly began to broadcast Islamic State logos and slogans in French, Arabic and English. Simultaneously the broadcaster’s Facebook page began to post inflammatory messages. “Soldiers of France, stay away from the Islamic State!” read one. “You have the chance to save your families, take advantage of it.”

“Je suIS IS,” read another.

But the second message was a lie.

According to security researchers, the culprit was a Russian hacking team long believed by cybersecurity analysts in and outside the US government to be working for the country’s largest intelligence agency, GRU. Fascinated researchers have given it a variety of names: APT 28, Strontium, the Sofacy Group, and Fancy Bear.

Last week, WikiLeaks distributed 20,000 emails from the Democratic National Committee (DNC) obtained after Fancy Bear and another hacking team believed to be tied to a competing Russian intelligence service, known as Cozy Bear, breached the DNC’s internal network. Cozy Bear is believed to have entered the network a year before and waited quietly, gathering information and cataloging emails. Fancy Bear came later. WikiLeaks’ consistent position is not to discuss its source and to push back against suggestions that it gained the data from either Bear.

Källa: Cozy Bear and Fancy Bear: did Russians hack Democratic party and if so, why? | Technology | The Guardian