Replies

Manner and Means of the Conspiracy
Spearphishing Operations

21. ANTONOV, BADIN, YERMAKOV, LUKASHEV, and their co-conspirators targeted victims using a technique known as spearphishing to steal victims’ passwords or otherwise gain access to their computers. Beginning by at least March 2016, the Conspirators targeted over 300 individuals affiliated with the Clinton Campaign, DCCC, and DNC.

a. For example, on or about March 19, 2016, LUKASHEV and his co-conspirators created and sent a spearphishing email to the chairman of the Clinton Campaign. LUKASHEV used the account “john356gh” at an online service that abbreviated lengthy website addresses (referred to as a “URL-shortening service”). LUKASHEV used the account to mask a link contained in the spearphishing email, which directed the recipient to a GRU-created website. LUKASHEV altered the appearance of the sender email address in order to make it look like the email was a security notification from Google (a technique known as “spoofing”), instructing the user to change his password by clicking the embedded link. Those instructions were followed. On or about March 21, 2016, LUKASHEV , YERMAKOV , and their co-conspirators stole the contents of the chairman’s email account, which consisted of over 50,000 emails.

I read about half of the indictment. My key take-aways:
* Democrats are incredibly naive and downright stupid about fundamental information security. The perps used the most basic spearphishing techniques to gain initial access. Weren't these people taught ANYTHING about security? (already known to the public)
* Democrats didn't bring the FBI in; rather they hired their own forensic IT firm. Why? (already known to the public)
* This is classic spy tradecraft and a national security issue. Since when do we indict spies? The only reason to indict spies to further bolster the preposterous claim that Trump was behind all of this.