ບໍລິສັດ ໄມໂຄຣຊັອຟ (Microsoft) ກ່າວວ່າ ພວກລັກເຈາະຂໍ້ມູນ ຫລື ແຮັກເກີທີ່ໄດ້ຮັບການສະ ໜັບສະໜຸນຈາກລັດຖະບານ ໄດ້ເລັ່ງເປົ້າໝາຍເພີ້ມຂຶ້ນ ໃສ່ຄະນະໂຄສະນາຫາສຽງທາງການເມືອງ ແລະກຸ່ມທີ່ກ່ຽວຂ້ອງຂອງສະຫະລັດ. ບໍລິສັດນີ້ບອກວ່າ ກຸ່ມສືບລັບທາງທະຫານຂອງຣັດເຊຍ ທີ່ເປັນກຸ່ມດຽວກັນກັບພວກທີ່ລັກເຈາະຂໍ້ມູນຂອງພັກເດໂມແຄຣັດໃນປີ 2016 ໄດ້ພະຍາ ຍາມລັກເຂົ້າໄປເອົາຂໍ້ມູນ ຂອງຫຼາຍກ່ວາ 200 ອົງການ ທີ່ລວມທັງພວກພັກການເມືອງ ແລະທີ່ປຶກສາຫລາຍຄົນ. ທ່ານ ທອມ ເບີດ (Tom Burt), ຮອງປະທານບໍລິສັດນັ້ນ ກ່າວຢູ່ໃນບົດຂຽນບລັອກວ່າ ຄວາມພະຍາຍາມແຊກແຊງຂອງພວກນັກສືບຣັດເຊຍ, ຈີນ ແລະອີຣ່ານ ໂດຍສ່ວນ ໃຫຍ່ແມ່ນຖືກຊອບແວຂອງ Microsoft ຢຸດໄວ້ໄດ້ ແລະ ພວກທີ່ຕົກຢູ່ໃນເປົ້າໝາຍໄດ້ຖືກແຈ້ງໃຫ້ຊາບ. ບໍລິສັດດັ່ງກ່າວຈະບໍ່ໃຫ້ຄວາມເຫັນຫຍັງ ກ່ຽວກັບຜູ້ທີ່ອາດໄດ້ຖືກລັກເຈາະຂໍ້ມູນໄປຢ່າງປະ ສົບຜົນສຳ ເລັດແລ້ວ ຫລື ຜົນກະທົບທີ່ເຂົາເຈົ້າໄດ້ຮັບ.
ກຸ່ມສືບລັບທາງທະຫານຂອງຣັດເຊຍກຸ່ມດຽວກັນກັບພວກທີ່ລັກລອບເຈາະຂໍ້ມູນ ຂອງພັກເດໂມແຄຣັດໃນປີ 2016 ໄດ້ແນເປົ້າໝາຍຄືນໃໝ່ຢ່າງຫ້າວຫັນໃສ່ພວກທີ່ກ່ຽວຂ້ອງກັບການເລືອກຕັ້ງຂອງສະຫະລັດ, ພະຍາຍາມຈະລັກເຈາະເຂົ້າໄປໃນຄອມພິວເຕີ້ຂອງຫລາຍກວ່າ 200 ອົງການ ລວມທັງການໂຄສະນາການເມືອງແລະທີ່ປຶກສາຂອງພວກເຂົາເຈົ້າ, ອີງຕາມບໍລິສັດ Microsoft ທີໄດ້ກ່າວໃນວັນພະຫັດວານນີ້.
ບໍລິສັດນີ້ກ່າວອີກວ່າ ຄວາມພະຍາຍາມແຊກແຊງດັ່ງກ່າວ ສະທ້ອນໃຫ້ເຫັນເຖິງຄວາມພະຍາຍາມທີ່ກ້າວໜ້າ ເພື່ອແຊກຊຶມເຂົ້າໄປໃນສະຖາບັນການເມືອງຂອງສະຫະລັດ.
ທ່ານທອມ ເບີດ (Tom Burt), ຮອງປະທານບໍລິສັດ Microsoft ກ່າວໃນບົດຂຽນ blog ວ່າ "ສິ່ງທີ່ພວກເຮົາໄດ້ເຫັນກົງກັນກັບຮູບແບບການໂຈມຕີກ່ອນໜ້ານີ້ເຊິ່ງບໍ່ພຽງແຕ່ແນເປົ້າໝາຍໃສ່ຜູ້ສະ ໝັກເລືອກຕັ້ງ ແລະພະນັກງານໂຄສະນາເທົ່ານັ້ນແຕ່ຍັງແນໃສ່ຜູ້ທີ່ເຂົາເຈົ້າປຶກສາກ່ຽວກັບບັນຫາສໍາຄັນອີກດ້ວຍ. ທ່ານກ່າວຕື່ມວ່າ ກຸ່ມທາງການເມືອງຂອງອັງກິດແລະຢູໂຣບກໍ່ໄດ້ຖືກລັກເຈາະເບິ່ງເຊັ່ນກັນ.
ທ່ານກ່າວວ່າ ຄວາມພະຍາຍາມເຈາະຂໍ້ມູນສ່ວນໃຫຍ່ຂອງພວກນັກສືບຣັດເຊຍ, ຈີນແລະອີຣ່ານແມ່ນຖືກຢຸດໄວ້ໄດ້ໂດຍຊອບແວຄວາມປອດໄພຂອງ Microsoft ແລະຜູ້ຕົກເປັນເປົ້າໝາຍໄດ້ຖືກແຈ້ງໃຫ້ຊາບແລ້ວ. ບໍລິສັດຈະບໍ່ໃຫ້ຄວາມເຫັນຫຍັງກ່ຽວກັບຜູ້ທີ່ອາດຖືກລັກເຈາະຂໍ້ມູນໄປຢ່າງປະສົບຜົນສຳເລັດແລ້ວ ຫລື ຜົນກະທົບທີ່ເຂົາເຈົ້າຈະໄດ້ຮັບ.
ເຖິງແມ່ນວ່າບັນດາເຈົ້າໜ້າທີ່ສືບລັບຂອງສະຫະລັດກ່າວໃນເດືອນແລ້ວນີ້ວ່າ ພວກຣັດເຊຍ ມັກປະທານາທິບໍດີ ດໍໂນລ ທຣໍາ ຢາກໃຫ້ທ່ານໄດ້ ແລະພວກຈີນ ຜັດຢາກໃຫ້ຄູ່ແຂ່ງຂອງເພິ່ນ ທີ່ມາຈາກພັກເດໂມແຄຣັດ, ອະດີດຮອງປະທານາທິບໍດີໂຈ ໄບເດັນ ໄດ້, ແຕ່ Microsoft ໄດ້ໃຫ້ຂໍ້ສັງເກດໃນວັນພະຫັດວານນີ້ວ່າ ພວກແຮັກເກີ້ທີ່ໄດ້ຮັບການສະໜັບສະໜຸນຈາກລັດຖະບານຈີນໄດ້ແນເປົ້າໝາຍໃສ່ບຸກຄົນທີ່ມີຊື່ສຽງທີ່ກ່ຽວຂ້ອງກັບການເລືອກຕັ້ງນີ້" ຊຶ່ງລວມທັງຄົນທີ່ກ່ຽວຂ້ອງກັບການໂຄສະນາຫາສຽງ ຂອງທ່ານໄບເດັນອີກດ້ວຍ.
Russian hackers targeting U.S. campaigns, Microsoft says
BOSTON (AP) — Microsoft says state-backed hackers have stepped up targeting of U.S. political campaigns and related groups. It says the same Russian military intelligence outfit that hacked the Democrats in 2016 has tried to break into more than 200 organizations including political parties and consultants. Company Vice President Tom Burt says in a blog post that most of the infiltration attempts by Russian, Chinese and Iranian agents were halted by Microsoft software and the targets notified, he said. The company would not comment on who may have been successfully hacked or the impact.
The same Russian military intelligence outfit that hacked the Democrats in 2016 has renewed vigorous U.S. election-related targeting, trying to breach computers at more than 200 organizations including political campaigns and their consultants, Microsoft said Thursday.
The intrusion attempts reflect a stepped-up effort to infiltrate the U.S. political establishment, the company said.
"What we've seen is consistent with previous attack patterns that not only target candidates and campaign staffers but also those who they consult on key issues," Tom Burt, a Microsoft vice president, said in a blog post. U.K. and European political groups were also probed, he added.
Most of the hacking attempts by Russian, Chinese and Iranian agents were halted by Microsoft security software and the targets notified, he said. The company would not comment on who may have been successfully hacked or the impact.
Although U.S. intelligence officials said last month that the Russians favor President Donald Trump and the Chinese prefer his Democratic challenger, former Vice President Joe Biden, Microsoft noted Thursday that Chinese state-backed hackers have targeted "high profile individuals associated with the election," including people associated with the Biden campaign.
China's hackers largely gather intelligence for economic and political advantage, while Russia tends to weaponize stolen data to destabilize other governments.
Microsoft did not assess which foreign adversary poses the greater threat to the integrity of the November presidential election. The consensus among cybersecurity experts is that Russian interference is the gravest. Senior Trump administration officials have disputed that, although without offering any evidence.
"This is the actor from 2016, potentially conducting business as usual," said John Hultquist, director of intelligence analysis at the cybersecurity firm FireEye. "We believe that Russian military intelligence continues to pose the greatest threat to the democratic process."
The Microsoft post shows that Russian military intelligence continues to pursue election-related targets undeterred by U.S indictments, sanctions and other countermeasures, Hultquist said. It interfered in the 2016 campaign seeking to benefit the Trump campaign by hacking the Democratic National Committee and emails of John Podesta, the campaign manager for Hillary Clinton, and dumping embarrassing material online, congressional and FBI investigators have found.
The same GRU military intelligence unit, known as Fancy Bear, that Microsoft identifies as being behind the current election-related activity also broke into voter registration databases in at least three states in 2016, though there is no evidence it tried to interfere with voting.
Microsoft, which has visibility into these efforts because its software is both ubiquitous and highly rated for security, did not address whether U.S. officials who manage elections or operate voting systems have been targeted by state-backed hackers this year. U.S. intelligence officials say they have so far seen no evidence of infiltrations.
Thomas Rid, a Johns Hopkins University geopolitics expert, said he was disappointed by Microsoft's refusal to differentiate threat level by state actor.
"They're lumping in actors that operate in a very different fashion, probably to make this sound more bipartisan," he said. "I just don't understand why."
Microsoft said in the past year it has observed attempts by Fancy Bear to break into the accounts of people directly and indirectly affiliated with the U.S. election, including consultants serving Republican and Democratic campaigns and national and state party organizations — more than 200 groups in all.
Also targeted was the center-right European People's Party, the largest grouping in the European Parliament. A party spokesperson said the hacking attempts were unsuccessful. The German Marshall Fund of the United States, a think tank, was another target. A spokesperson said there was no evidence of intrusion.
Microsoft did not say whether Russian hackers had attempted to break into the Biden campaign but did say that Chinese hackers from the state-backed group known as Hurricane Panda "appears to have indirectly and unsuccessfully" targeted the Biden campaign through non-campaign email accounts belonging to people affiliated with it.
The Biden campaign did not confirm the attempt, although it said in a statement that it was aware of the Microsoft report.
Iranian state-backed hackers unsuccessfully tried to log into accounts of Trump campaign and administration officials between May and June of this year, the blog said.
"We are a large target, so it is not surprising to see malicious activity directed at the campaign or our staff," Trump campaign deputy press secretary Thea McDonald said. She declined further comment.
Tim Murtaugh, the campaign's communications director, said: "President Trump will beat Joe Biden fair and square and we don't need or want any foreign interference."
In June, Google disclosed that Hurricane Panda had targeted Trump campaign staffers while Iranian hackers tried to breach accounts of Biden campaign workers. Such phishing attempts typically involve forged emails with links designed to harvest passwords or infect devices with malware.
Although both Attorney General William Barr and National Security Adviser Robert O'Brien have said China represents the greatest threat to U.S. elections, Microsoft's only mention of a Trump administration official targeted by Chinese hackers is "at least one prominent individual formerly associated" with the administration.
Graham Brookie, director of digital forensic research at The Atlantic Council, disputes the claim made by Barr and O'Brien that China poses the greater threat to this year's election. Brookie’s lab is at the forefront of unearthing and publicizing Russian disinformation campaigns.
Brookie confirmed that his employer was among targets of Hurricane Panda but said there was no evidence the hacking attempts, which he said were unsuccessful, had anything to do with the 2020 election.
"We have every indication that this was an instance of cyber-espionage, information gathering, as opposed to electoral interference," he said.
By contrast, Brookie said, "it's pretty evident that the Russian attempts (Microsoft disclosed) were focused on electoral processes and groups working on that."
Microsoft noted a shift toward greater automation in Fancy Bear methods for trying to steal people's log-in credentials, which previously largely relied on phishing. In recent months, the group has employed so-called brute-force attacks that barrage an account login with short rapid bursts of potential passwords. It has also used a different method that makes only intermittent login attempts to avoid detection.
Fancy Bear has also stepped up its use of the Tor anonymizing service to hide its hacking, Microsoft said.