I hope this gets taken seriously by CISA and they are ntact Microsoft and the email providers to see what sort of information can be found out about these “individuals”. I’m usually against tracking but in this case, it can help us understand more about the malicious actors, like, are their IPs coming from a certain state, or are they all isong a VPN, and if so, which one? And then, if applicable, getting in touch with the VPN provider and getting as much data as possible.
How about using that data to aid in investigations (as it jas beem done mamy times before)? I mean, imagine this turns out to be a state actor! We need to know what’s happening. We need to know if these are connected. And this information can help predict their next move.
To quote Gandalf from the LOTR films (not sure if that quote is in the books):
“Send word to all our allies… The enemy’s moving against us. We need to know where he will strike”.
Also, first they tried to strike Linux systems, then they tried to strike the Web. What’s next? If anyone has any ideas, feel free to share them here, as we can get an idea of what projects need to be more vigilant.
I hope this gets taken seriously by CISA and they are ntact Microsoft and the email providers to see what sort of information can be found out about these “individuals”. I’m usually against tracking but in this case, it can help us understand more about the malicious actors, like, are their IPs coming from a certain state, or are they all isong a VPN, and if so, which one? And then, if applicable, getting in touch with the VPN provider and getting as much data as possible.
How about using that data to aid in investigations (as it jas beem done mamy times before)? I mean, imagine this turns out to be a state actor! We need to know what’s happening. We need to know if these are connected. And this information can help predict their next move.
To quote Gandalf from the LOTR films (not sure if that quote is in the books):
“Send word to all our allies… The enemy’s moving against us. We need to know where he will strike”.
Also, first they tried to strike Linux systems, then they tried to strike the Web. What’s next? If anyone has any ideas, feel free to share them here, as we can get an idea of what projects need to be more vigilant.