4 years, 5 months ago

Infamous hacking network shut down by Microsoft resurfaces in time for US presidential election

Sign up to our free weekly IndyTech newsletter delivered straight to your inbox Sign up to our free IndyTech newsletter Sign up to our free IndyTech newsletter SIGN UP I would like to be emailed about offers, events and updates from The Independent. “Adversaries can use ransomware to infect a computer system used to maintain voter rolls or report on election-night results, seizing those systems at a prescribed hour optimized to sow chaos and distrust,” Microsoft Corporate Vice President Tom Burt, said at the time. Although Microsoft took down all of the Trickbot command-and-control servers outside the United States, the botnet’s operators added another dozen servers in countries including Amsterdam, Berlin and Moscow. “They definitely disrupted them, but Microsoft’s actions have not altered the capability of Trickbot to do what they did before,” said Mark Arena, thechief executive of threat intelligence company Intel 471. “It’s a worry because people already have shaky confidence.” A ransomware attack could give credence to the claim that the election was rigged or hacked, something that president Trump has repeatedly claimed without evidence.

The Independent

Discover Related