{"id":2080,"date":"2017-01-16T12:04:27","date_gmt":"2017-01-16T20:04:27","guid":{"rendered":"http:\/\/www.artesianmedia.com\/blog\/?p=2080"},"modified":"2017-01-16T12:04:27","modified_gmt":"2017-01-16T20:04:27","slug":"guccifer-back-claims-not-russian","status":"publish","type":"post","link":"https:\/\/www.artesianmedia.com\/blog\/guccifer-back-claims-not-russian\/","title":{"rendered":"Guccifer hacker is back; claims not to be Russian"},"content":{"rendered":"<h3>Guccifer hacker &#8211; the one who leaked\u00c2\u00a0DNC emails &#8211; taunts US government<\/h3>\n<p>I guess this is the world we live in now.<\/p>\n<p>With increasing attention being paid to the way that hacks of formerly secure and private information is destablilizing governments around the world, the hacker known as &#8220;Guccifer&#8221; has emerged from hiding (?) and <a href=\"https:\/\/guccifer2.wordpress.com\/2017\/01\/12\/fake-evidence\/\">posted a sarcastic message on his\/her\/their blog<\/a>:<\/p>\n<blockquote><p>I really hope you\u00e2\u20ac\u2122ve missed me a lot. Though I see they didn\u00e2\u20ac\u2122t let you forget my name. The U.S. intelligence agencies have published several reports of late claiming I have ties with Russia.<\/p>\n<p>I\u00e2\u20ac\u2122d like to make it clear enough that these accusations are unfounded. I have totally no relation to the Russian government. I\u00e2\u20ac\u2122d like to tell you once again I was acting in accordance with my personal political views and beliefs.<\/p><\/blockquote>\n<p>Sure you were. Sure you were.<\/p>\n<p>It must be noted <a href=\"http:\/\/www.nbcnews.com\/news\/world\/guccifer-hacker-who-leaked-bush-paintings-sentenced-jail-n124556\">that the original &#8220;Guccifer&#8221; is in jail <\/a>, and this &#8220;nym&#8221; only came up after the hacking operation against the Democratic National Committee was exposed, and people started pointing fingers at the Kremlin. More on that in a bit.<\/p>\n<div id=\"attachment_2084\" style=\"width: 609px\" class=\"wp-caption alignnone\"><a href=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-2084\" class=\"size-medium wp-image-2084 lazyload\" data-src=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks-599x449.jpg\" alt=\"Guccifer hacker operating out of Kremlin\" width=\"599\" height=\"449\" data-srcset=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks-599x449.jpg 599w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks-768x576.jpg 768w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks-1024x768.jpg 1024w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/Kremlin-fireworks.jpg 1333w\" data-sizes=\"(max-width: 599px) 100vw, 599px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 599px; --smush-placeholder-aspect-ratio: 599\/449;\" \/><\/a><p id=\"caption-attachment-2084\" class=\"wp-caption-text\">Fireworks over the Kremlin<\/p><\/div>\n<p>Guccifer had previously claimed to be Romanian. However, according to IT News, this claim proved to be false:<\/p>\n<blockquote><p>There&#8217;s good reason to doubt Guccifer&#8217;s claims. He or she &#8212; or they &#8212; previously claimed to be Romanian, but a journalist previously reported testing out Guccifer&#8217;s Romanian skills and <a href=\"http:\/\/motherboard.vice.com\/read\/why-does-dnc-hacker-guccifer-20-talk-like-this\">found them lacking<\/a>.<\/p>\n<p>Guccifer 2.0&#8217;s re-emergence after a two-month hiatus from Twitter and his blog is certainly designed to stir the pot. Especially after Donald Trump spent weeks doubting Russian involvement in the hack and only this week changed his tune to match that of U.S. intelligence agencies.<\/p>\n<p>It was based on that intelligence assessment that President Obama\u00c2\u00a0<a href=\"http:\/\/www.csoonline.com\/article\/3153732\/election-hacking\/the-us-has-sanctioned-russia-over-election-hacking.html\">ordered<\/a> sanctions against Russia and also vowed covert action.<\/p><\/blockquote>\n<p>Digging deeper into the provenance of the Guccifer hacker, we find that it&#8217;s not really the intelligence agencies and the Obama administration that&#8217;s <a href=\"https:\/\/motherboard.vice.com\/read\/guccifer-20-is-likely-a-russian-government-attempt-to-cover-up-their-own-hack\">pointing the finger at the Russians &#8211; it&#8217;s pretty much every reputable internet security outfit as well<\/a>.<\/p>\n<blockquote><p>considering a long trail of breadcrumbs pointing back to Russia left by the Guccifer hacker, as well as other circumstantial evidence, it appears more likely that Guccifer 2.0 is nothing but a disinformation or deception campaign by Russian state-sponsored hackers to cover up their own hack\u00e2\u20ac\u201dand a hasty and sloppy one at that.<\/p>\n<p>The main element pointing to Russia is the timeline of the events. For a year, hackers with ties to the Russian government\u00e2\u20ac\u201dlikely the FSB and the military GRU\u00e2\u20ac\u201dwere inside the servers of the DNC, stealing documents and even reading chats and emails, according to <a href=\"https:\/\/www.crowdstrike.com\/blog\/bears-midst-intrusion-democratic-national-committee\/\" target=\"_blank\">CrowdStrike<\/a> and <a href=\"https:\/\/www.washingtonpost.com\/world\/national-security\/russian-government-hackers-penetrated-dnc-stole-opposition-research-on-trump\/2016\/06\/14\/cf006cb4-316e-11e6-8ff7-7b6c1998b7a0_story.html\" target=\"_blank\"><em>The Washington Post<\/em><\/a>. Then, after the IT people at the DNC noticed weird network activities and called in CrowdStrike, the hackers got kicked out. This led to the operation being exposed in the media.<\/p><\/blockquote>\n<p><a href=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election.jpeg\"><img decoding=\"async\" class=\"alignnone size-medium wp-image-2083 lazyload\" data-src=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election-599x325.jpeg\" alt=\"\" width=\"599\" height=\"325\" data-srcset=\"https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election-599x325.jpeg 599w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election-768x416.jpeg 768w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election-1024x555.jpeg 1024w, https:\/\/www.artesianmedia.com\/blog\/wp-content\/uploads\/2017\/01\/rigging-an-election.jpeg 1160w\" data-sizes=\"(max-width: 599px) 100vw, 599px\" src=\"data:image\/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==\" style=\"--smush-placeholder-width: 599px; --smush-placeholder-aspect-ratio: 599\/325;\" \/><\/a><\/p>\n<p>So when you start looking closer, some things leap out at you:\u00c2\u00a0The leaked documents contain metadata indicating they\u00e2\u20ac\u2122ve been opened and processes on multiple virtual machines, as the independent cybersecurity researcher known as Pwn All The Things <a href=\"https:\/\/twitter.com\/pwnallthethings\/status\/743197064843104257\" target=\"_blank\">pointed out<\/a> on Twitter on Wednesday. Some of these machines had different configurations, including one with the Cyrillic language setting and the username of \u00e2\u20ac\u0153Iron Felix,\u00e2\u20ac\u009d referencing Felix Dzerzhinsky, <a href=\"https:\/\/en.wikipedia.org\/wiki\/Felix_Dzerzhinsky\" target=\"_blank\">the first head<\/a> of the Soviet intelligence services.<\/p>\n<p>Again: this &#8220;lone hacker&#8221; uses many VMs, speaks Russian; username is founder of USSR secret police &amp; likes laundering docs via Wikileaks.<\/p>\n<p>Not exactly hard to connect the dots there.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Guccifer hacker &#8211; the one who leaked\u00c2\u00a0DNC emails &#8211; taunts US government I guess this is the world we live in now. With increasing attention being paid to the way that hacks of formerly secure and private information is destablilizing governments around the world, the hacker known as &#8220;Guccifer&#8221; has emerged from hiding (?) and [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","wds_primary_category":0,"footnotes":""},"categories":[60,52,104],"tags":[925,927,924,922,923,926,928],"class_list":["post-2080","post","type-post","status-publish","format-standard","hentry","category-conspiracy-theories","category-politics-new-media","category-ukraine","tag-clintons-emails","tag-digital-terrorism","tag-dnc","tag-guccifer","tag-hacking","tag-russian-state-sponsored-cyberwarfare","tag-wikileaks"],"_links":{"self":[{"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/posts\/2080","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/comments?post=2080"}],"version-history":[{"count":0,"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/posts\/2080\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/media?parent=2080"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/categories?post=2080"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.artesianmedia.com\/blog\/wp-json\/wp\/v2\/tags?post=2080"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}