Microsoft disrupts new Russian cyberattacks against U.S. democracy

Microsoft says it has uncovered and blocked a new wave of attempted Russian cyberattacks aimed at disrupting the midterm elections in the U.S. this fall.

In a blog post Microsoft President Brad Smith said that Microsoft’s Digital Crimes Unit (DCU) uncovered efforts by hackers linked to the Russian government to mimic the pages of right-wing think tanks, in an effort to expand Russian attacks during the election season.

Smith said that last week Microsoft’s Digital Crimes Unit (DCU) used a court order to disrupt and transfer control of six internet domains created by a group widely associated with the Russian government and known as Strontium, or alternatively Fancy Bear or APT28.

“We have now used this approach 12 times in two years to shut down 84 fake websites associated with this group," Smith said. "Attackers want their attacks to look as realistic as possible and they therefore create websites and URLs that look like sites their targeted victims would expect to receive email from or visit. The sites involved in last week’s order fit this description.”

Link to tweet