Macron fakes out Fancy Bear

The failed effort by Russian attackers to influence the outcome of the French presidential campaign in its final hours was in part a forced error, thanks to an active defense by the digital team of French president-elect Emmanuel Macron's campaign organization, the digital director of the campaign has claimed. Campaign team members told the New York Times that as the phishing attacks mounted, they created a collection of fake e-mail accounts seeded with false information.

"We created false accounts, with false content, as traps," Macron campaign digital director Mounir Mahjoubi told the Times. "We did this massively, to create the obligation for them to verify, to determine whether it was a real account."

...

The bait documents may have caused the attackers to rush their efforts. As Ars reported Monday, the eventual dump of documents by the attackers included metadata showing Russian versions of Microsoft Office were used to edit some documents, and the name of an employee of a company providing information security services to Russian intelligence organizations was in document metadata showing the last person to edit at least nine documents. Multiple documents were proven to be forgeries, including one which appeared to be an invoice for a Bitcoin payment for mephedrone ("bath salts") to be sent to the French National Assembly. The Bitcoin wallet and blockchain transaction data was easily determined to be fake.

2 thoughts on “Macron fakes out Fancy Bear

  1. Jewish Steel

    These are the kind of simple counter measures I hope, say, Kristen Gillibrand will be hip to.

Comments are closed.