Prigozhin did not disconnect from the network

What is behind the cyber attack of the Americans on the "Troll Factory"

The US cybercommunication, together with the intelligence of the National Security Agency, blocked the Internet access to the St. Petersburg “Internet research agency” during the intermediate elections to the American Congress in 2018. This was announced on February 26 by The Washington Post, citing several anonymous civil servants. Kiberataka on the so -called “troll factory”, which is associated with businessman Evgeny Prigozhin, occurred on November 6, directly on the election day, and continued “day or about that” while the voices were calculated.

According to NBC News, American President Donald Trump not only approved the intervention of Russian “trolls” in the elections, but also personally signed a document on a cyber attack. The first offensive cyberoperation undertaken by the United States against Russia is a “warning that the Kremlin’s operations against the United States will not remain urpent”, quotes WP of its sources.

The US Ministry of Justice accuses the “Internet research agency” of interfering in the election of the American president in 2016: it is claimed that “trolls”, impersoning the Americans on pages and groups on social networks, “aggravated the stress on race, gender identity and weapons control”.

According to American officials, the employees of the “Internet research agency” had to contact the system administrators to deal with the technical problem arising as a result of the attack. At the same time, how technologically made cyberoperation, not one of the newspaper sources discloses.

“If this really happened, there could be dozens of attacks, if not hundreds,” explains Karen Ghazaryan, chief analyst in the Russian Association of Electronic Communications.

- To conduct an attack on the corporate network of the organization and to disable the Internet is a goal, and there are a lot of ways to achieve it.

This can be the introduction of viruses, DDOS-Atak (massive contact of computers to the network nodes aimed at refusing the latter), tracking which infrastructure was used, and interception of traffic. How many hacker hacking options exist, so many hypotheses here.

So far, all the assumptions about how exactly the cybercommunication has turned off the “troll factory” from the network, there are only assumptions, especially since none of the WP or NBC News sources called itself.

This is also said by the executive director of the Internet Protection Society Mikhail Klimarev: “This is only a hypothesis, but most likely [trolls] spared the money to make the reserve data transfer channels. Regretted the reservation of equipment. If one server has fallen, then you take out the second out of the box and turn it on - usually this is done. ”

The main claim in this case refers to the technical service of the company, which was unable to quickly restore the connection to the network. “It turns out that cyberataka is just a puncture of their technical service, which has not been preoccupied with either duplication, reservation, nor Disaster Recovery Plan, that is, an emergency recovery plan,” the expert said.

“The only thing I understood is that, most likely, these“ trolls ”simply work out of hand.”

Despite the lack of specific facts, the Russian and American media connected the November cyber attack with the drafts of Senator Andrei Klishas on the “sovereign Runet”, which implies the creation of an autonomous domestic network in the event of disconnection of Russia from the world Internet.

The press secretary of the Russian president Dmitry Peskov called not to trust the data provided by the American newspaper with sources that did not open their names. He stated that to influence the working capacity of the Internet in Russia from the United States is “probably possible”. “Based on this, based on such potential threats, the legislative activity is carried out aimed at the adoption of bills - the so -called bill on the sovereign Internet,” Peskov quoted “Interfax”.

The author of the concept of “Autonomous Runet” Andrei Klishas could not answer the question “New” about whether he knew about this cyber attack before creating the bill. However, Klishas said that “if there is such a technical opportunity (and it is), then we must provide for these risks. The bill is aimed at this. ”

Earlier, IT experts talked about technical difficulties associated with the disconnection of any country from the global network. Firstly, there are 13 root DNS servers in the world, which are controlled by different operators: to turn off someone from the Internet, they need to agree on this. Secondly, such a shutdown is economically unprofitable, since it will lead to a loss of huge amounts of money for business.

PS

The Federal News Agency, which is associated with Evgeny Prigozhin, confirmed an attempt to attack the US Cybercartum. It reported that on November 5, the day before the elections to Congress, they had 2 out of 4 hard drives. A RAID controller was also destroyed-an array of several hard drives, increasing the reliability of data storage and the speed of their recording or reading. At the same time, it is argued that the operation of cybercommunications has completely failed.
“Note that the IRA (the so-called“ troll factory ”) and the Federal News Agency (FAN) are constantly linked in the Western press, which is neither official evidence, nor any other grounds,” the agency’s editors said.