FBI and DHS published a report on Russian cyberattacks
The Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI) issued a Joint Analysis Report (JAR) provides technical details regarding the Russian cyberattacks to compromise the U.S. election, as well as a range of U.S. Government and private sector entities.
You can find the full document here.
According to the report, these cyber operations have included spearphishing campaigns targeting government organizations, critical infrastructure entities, think tanks, universities, political organizations, and corporations leading to the theft of information.
The U.S. Government confirms that two different RIS actors participated in the intrusion into a U.S. political party. The first actor group, known as Advanced Persistent Threat (APT) 29, entered into the party’s systems in summer 2015, while the second, known as APT28, entered in spring 2016.
US intelligence services believe Russia ordered cyber-attacks on the Democratic National Committee (DNC) in an attempt to influence the election in favor of the Republican candidate, Donald Trump.
Fancy Bear (also known as Sofacy or APT 28) may indicate affiliation with Main Intelligence Department or GRU, Russia’s premier military intelligence service. Cozy Bear (also referred to in some industry reports as CozyDuke or APT 29) is related to Russia’s main intelligence services - FSB, the primary domestic intelligence agency.
In this regard, Obama administration on Thursday announced its retaliation for Russian efforts to interfere with the US presidential election, ordering sweeping new sanctions that included the expulsion of 35 Russian diplomats