This article is from the source 'guardian' and was first published or seen on . It last changed over 40 days ago and won't be checked again for changes.

You can find the current article at its original source at https://www.theguardian.com/technology/2017/may/09/us-russians-hacking-france-election-macron-leak

The article has changed 2 times. There is an RSS feed of changes available.

Version 0 Version 1
US official says France warned about Russian hacking before Macron leak US official says France warned about Russian hacking before Macron leak
(about 5 hours later)
The US watched Russians hack France’s computer networks during the presidential election – and tipped off French officials before it became public, a US cyber official has told the Senate. The US National Security Agency tipped off French officials that Russia was hacking the country’s computer systems during the presidential campaign and is working with the UK and Germany to help shield their upcoming elections from Moscow’s interference.
France’s election campaign commission said on Saturday that “a significant amount of data” — and some fake information — was leaked on social networks following a hacking attack on Emmanuel Macron’s successful presidential campaign. The NSA director, Adm Mike Rogers, told a Senate committee on Tuesday that the agency tipped off its French counterparts before the hack of Emmanuel Macron’s campaign became public 36 hours before he won the second round of the presidential campaign.
France’s cybersecurity agency is investigating what a government official described as a “very serious” breach. “We had become aware of Russian activity,” Rogers, who is also head of US Cyber Command, said. “We had talked to our French counterparts prior to the public announcements of the events that were publicly attributed this past weekend. We said, ‘Look we are watching the Russians, we’ve seen them penetrate your infrastructure, here’s what we’ve seen, what can we do to try to assist?”
The leak came 36 hours before the nation voted Sunday in a crucial presidential runoff between Macron and far-right candidate Marine Le Pen. “We’re doing similar things with our German and British counterparts, they have an upcoming election sequence,” Rogers added. “We’re all trying to figure out how we can learn from each other.”
The election commission said the leaked data apparently came from Macron’s “information systems and mail accounts from some of his campaign managers” – an attack that mimicked Russian hacking of the Democratic National Committee in the 2016 US presidential election. He did not give details of what help the US is providing to the UK and Germany, who hold elections on June 8 and September 24 respectively, but US officials have previously said that they were seeking to share their experience of the 2016 presidential election where US intelligence agencies concluded that Russia hacked and leaked Democratic Party communications and disseminated fake news, with the aim of getting Donald Trump election.
“We had become aware of Russian activity. We had talked to our French counterparts and gave them a heads-up – ‘Look, we’re watching the Russians. We’re seeing them penetrate some of your infrastructure. Here’s what we’ve seen. What can we do to try to assist?’” Adm Mike Rogers told the Senate armed services committee. An estimated nine gigabytes of data was stolen from the Macron campaign and published online on Friday. Some of the material was authentic and some fake, apparently as a result of Macron’s deliberately feeding hackers confected emails to blunt the effectiveness of the attack.
He said the US is also working closely with German and British counterparts. The Macron campaign has described the attack as massive and coordinated, but has not formally blamed Russia. The French cybersecurity agency is still investigating the nature of the attack. The election commission said the leaked data apparently came from Macron’s “information systems and mail accounts from some of his campaign managers” – reminiscent of Russian hacking of the Democratic National Committee last year.
Rogers said the US is still working on a comprehensive cyber policy to counter what he called a “brave new world” in the cyber domain. He said the US is improving its ability to defend against cyber-attacks, but added: “I would also tell myself, Rogers, you are not moving fast enough.” Rogers comments to the Senate armed services committee on Tuesday marked the first western official assessment that the Macron hack was sponsored by Moscow.
The Macron files published on Friday contained metadata in Cyrillic, implying they may have been edited on Russian software, and even included the name of a Russian intelligence contractor.
Cyber security experts said that did not represent conclusive proof that Russian intelligence was behind the hack.
“If was to play devil’s advocate, if you are a sophisticated about cyber security, you know very well that you will leave metadata traces and you also know that metadata is spoofable,” said Aleksandr Yampolskiy, the co-founder of SecurityScorecard, a cyber security monitoring and rating agency. “The whole description sounds a little too sloppy.”
Dimitri Sirota, the CEO of BigID, a data protection consultancy, said the digital fingerprints left in the metadata could have been just the result of sloppiness.
“Or they could be leaving a mark, that creates deniability but also a pointer of what is behind it. It helps create a fog,” Sirota said.
He added that as such hacking becomes commonplace in elections, campaigns would started to adopt a standardised model of cyber security, using encryption, and deleting more data from their systems.
“At the same time, consumers are going to be more aware of fake news. Nobody likes their elections tampered with and no one wants to be manipulated,” Sirota said. “I think you are going to see the impact of these kind of attacks being attenuated as time goes by.”
In his testimony on Tuesday, Rogers said the US is still working on a comprehensive cyber policy to counter what he called a “brave new world” in the cyber domain. He said the US is improving its ability to defend against cyber-attacks, but added: “I would also tell myself, Rogers, you are not moving fast enough.”