US cybersecurity firms confirm Russian hacks of DNC

Two US cybersecurity firms say that their analysis of computer breaches at the Democratic Party’s funding group for congressional candidates shows detailed evidence that the intrusions were likely linked to Russian hackers.

The two companies say in separate posts today that Internet domains and registrants used in the breach of computers used by the Democratic Congressional Campaign Committee, or DCCC, tie back to a Russian hacking group linked to that nation’s intelligence services.

That same hacking group, known as “Fancy Bear,” was previously connected to the June cyber breach at the Democratic National Committee.

Both firms, Fidelis Cybersecurity and ThreatConnect, say the hackers created a fake Internet DCCC donation site. The registrant for the fake DCCC site was linked back to other web domains used by “Fancy Bear.”

— AP