US expels 35 Russian diplomats over cyber attack allegations
US President Barack Obama has ordered the expulsion of 35 Russian diplomats accused of espionage operations in response to cyberattacks during the presidential election. Several sanctions have also been imposed on several Russian entities and two centers owned by the Russian government have been closed in the United States. The White House has published a statement detailing different cyberattacks and information theft have been carried out in Russia to influence the presidential elections. In addition, a report with technical details on the cyberattacks of Russian civilian and military intelligence services has been declassified from the Department of Homeland Security and the FBI. That report includes data on APTs and previously known attacks, ensuring that they have been carried out by the Russian intelligence services.
Update 10/02/2017: The US government has published a new report on the technical details of cyber attacks. This report places particular emphasis on the definition of rules and signatures which form part of the APT28 and APT29 threats.
References:
- 29/12/2016 whitehouse.gov The Administration’s Response to Russia: What You Need to Know
- 29/12/2016 us-cert.gov GRIZZLY STEPPE – Russian Malicious Cyber Activity
- 29/12/2016 nytimes.com Obama Strikes Back at Russia for Election Hacking
- 30/12/2016 theguardian.com Obama expels 35 Russian diplomats in retaliation for US election hacking
- 29/12/2016 arstechnica.com Obama tosses 35 Russians out of US, sanctions others for election meddling
- 29/12/2016 elmundo.es EEUU expulsa a 35 agentes rusos de Inteligencia por injerencia en las elecciones presidenciales
- 30/12/2016 internacional.elpais.com Estados Unidos impone sanciones a Rusia por ciberataques durante las elecciones
- 30/12/2016 internacional.elpais.com Así se produjo el ciberataque ruso en la campaña electoral de EE UU, según el FBI
- 13/09/2016 certsi.es WADA documents leaked
- 30/08/2016 certsi.es The FBI reports attacks against American voting system
- 23/12/2015 certsi.es First blackout in history due cyber-attack
- 27/10/2014 certsi.es APT28: a new threat with probable Russian origin
- 14/10/2014 certsi.es APT BlackEnergy y 0day Sandworm
- 30/06/2014 certsi.es APT "dragonfly" en Sistemas de Control Industrial
- 10/02/2017 us-cert.gov Enhanced Analysis of GRIZZLY STEPPE Activity