Some Brexit-related emails recently leaked online came from the hands of Russian hackers, Google experts have said.
See also: Gamaredon: Russian hackers use 8 new malware payloads
The team has identified a new website, titled “Very English Coop d'Etat,” which allegedly leaked multiple emails from senior government officialsinvolved in one way or another in the UK’s departure from the European Union – known to us all as Brexit – including: former MI6 Sir Richard Dearlove, Gisela Stuart, lead non-executive board member for the Cabinet Office, historian Robert Tombs and many others.
See also: The Russian Nobelium hackers who hacked SolarWinds strike again!
The website has claimed to be part of a staunch pro-Brexit group. However, two victims of the leak on Wednesday confirmed they had been targeted by hackers and blamed the Kremlin.
The website does not detail whether any malware was used in the attack or even who was behind the campaign.
War with Ukraine
Analyzing the website, Google's Threat Analysis Group (TAG) director Shane Huntley told Reuters that all evidence points to a Russia-based hacking group known as "Cold River."
Reuters, which reported the story, said it could not confirm the authenticity of the emails, but some of those involved suggested they might be true. Dearlove, for example, told Reuters that he was “aware of a Russian operation against a Proton account that contained emails” to and from him, but added that the leaked contents should be taken with caution due to “the current crisis in relations with Russia.”
After all, the United Kingdom has openly sided with Ukraine in the ongoing conflict, providing the country with weapons and other means of support. Furthermore, Prime Minister Boris Johnson was blocked by Russia in mid-April due to his support for Ukraine.
Tombs also said he was aware of “Russian disinformation based on illegal hacking” and gave no further feedback. Others remained silent.
See also: Central Bank of Denmark: Russian hackers had access to its network for months
The only thing that has proven more difficult than confirming the authenticity of the emails is proving who is behind the attack on these endpoints. Thomas Rid, a cybersecurity expert at Johns Hopkins University, told Reuters that the modus operandi of this attack is similar to some of the previous ones carried out by Russian hackers.
Information source: techradar.com
