Tag: iab-email

The identities behind the 30 unindicted co-conspirators in Trump’s Georgia case | CNN Politics

[ad_1]

CNN
—

Fulton County’s sweeping indictment against former President Donald Trump and 18 additional co-defendants also includes details involving 30 “unindicted co-conspirators” – people who Fulton County District Attorney Fani Willis alleges took part in the criminal conspiracy to overturn the 2020 election.

Some of the co-conspirators are key Trump advisers, like Boris Epshteyn, while several others are likely Georgia officials who were the state’s fake electors for Donald Trump.

One of the unindicted co-conspirators who appears multiple times in the indictment is Georgia’s Republican Lt. Gov. Burt Jones. Willis was barred by a state judge from investigating Jones after she hosted a fundraiser last year for Jones’ Democratic opponent when he was a state senator running for lieutenant governor.

The 98-page document alleges the 30 unindicted co-conspirators, who are not named, “constituted a criminal organization whose members and associates engaged in various related criminal activities” across the 41 charges laid out in the indictment.

“Prosecutors use the ‘co-conspirator’ label for people who are not charged in the indictment but nonetheless were participants in the crime,” said Elie Honig, a CNN senior legal analyst and former federal and state prosecutor. “We do this to protect the identity and reputation of uncharged people – though they often are readily identifiable – and, at times, to turn up the pressure and try to flip them before a potential indictment drops.”

CNN was able to identify some of the co-conspirators by piecing together details included in the indictment. Documents reviewed from previous reporting also provide clues, especially the reams of emails and testimony from the House January 6 Committee’s report released late last year.

CNN has been able to identify or narrow down nearly all of the unindicted co-conspirators:

The indictment refers to Trump’s speech on November 4, 2020, “falsely declaring victory in the 2020 presidential election” and that Individual 1 discussed a draft of that speech approximately four days earlier, on October 31, 2020.

The January 6 committee obtained an email from Fitton sent on October 31 to Trump’s assistant Molly Michael and his communications adviser Dan Scavino, which says, “Please see below a draft statement as you requested.”

The statement Fitton wrote also says in part, “We had an election today – and I won.”

The indictment states that co-conspirator 3 appeared at the infamous November 19, 2020, press conference at the Republican National Committee headquarters in Washington, with Rudy Giuliani, one of the defendants in the case. Epshteyn was there.

The indictment also includes two emails between co-conspirator 3, John Eastman and Kenneth Chesebro, two lawyers who pushed the strategy of then-Vice President Mike Pence trying to overturn the election on January 6, 2021, including one with a draft memo for options of how to proceed on January 6.

According to emails released by the January 6 committee, Epshteyn was the third person on those emails.

Individual 4 received an email from co-defendant David Shafer, who was then Georgia’s Republican Party chair, on November 20, 2020, that said Scott Graham Hall, a Georgia bail bondsman, “has been looking into the election on behalf of the President at the request of David Bossie,” according to the indictment.

CNN obtained court documents that show Shafer sent this email to Sinners in November 2020: “Scott Hall has been looking into the election on behalf of the President at the request of David Bossie. I know him.” Hall is one of the 19 defendants charged in the indictment.

The indictment notes an additional email from December 12, 2020, from Shafer to Individual 4 advising them to “touch base” with each of the Trump presidential elector nominees in Georgia in advance of the December 14, 2020, meeting to confirm their attendance.

CNN reporting from June 2022 reveals an email exchange between Sinners and David Shafer on December 13, 2020, 18 hours before the group of alternate electors gathered at the Georgia State Capitol.

“I must ask for your complete discretion in this process,” Sinners wrote. “Your duties are imperative to ensure the end result – a win in Georgia for President Trump – but will be hampered unless we have complete secrecy and discretion.”

Kerik’s attorney, Tim Parlatore, confirmed to CNN that his client is the unnamed individual listed in the indictment as co-conspirator 5. The indictment refers to co-conspirator 5 taking part in several meetings with lawmakers in Pennsylvania and Arizona, states Trump was contesting after the 2020 election.

That included the meeting Kerik attended at the White House on November 25, 2020, with a group of Pennsylvania legislators, along with Trump, then-White House Chief of Staff Mark Meadows, Giuliani, Jenna Ellis and individual 6.

Parlatore took issue with Willis’ definition of co-conspirator in the case of Kerik, saying that the indictment only refers to him in the context of receiving emails and attending meetings.

The indictment says on November 25, 2020, Trump, Meadows, Giuliani, Ellis, Individuals 5 and 6 met at the White House with a group of Pennsylvania legislators.

According to the January 6 committee report, Waldron was among the visitors who were at the White House that day, along with Kerik and attorney Katherine Freiss. Cassidy Hutchinson, former aide to Meadows, explained that their conversation with the president touched on holding a special session of the Pennsylvania state legislature to appoint Trump electors.

The indictment also says on December 21, 2020, Sidney Powell, a defendant in the case, sent an email to Individuals 6, 21 and 22 that they were to immediately “receive a copy of all data” from Dominion’s voting systems in Michigan.

The Washington Post reported last August that the email stated Waldron was among the three people to receive the data, along with Conan Hayes and Todd Sanders.

Waldron is the only person who was involved in both the White House meeting and received the Powell email.

The indictment says Giuliani re-tweeted a post from co-conspirator 8 on December 7, 2020, calling upon Georgia voters to contact their local representatives and ask them to sign a petition for a special session to ensure “every legal vote is counted.” The date and content of the tweet match a tweet posted by Jones, who was at the time a state senator.

Jones, who was elected lieutenant governor in November, appears more than a dozen times throughout the indictment as co-conspirator 8, including as a fake elector.

After the 2020 election, Jones was calling for a special session of the Georgia legislature, something Gov. Brian Kemp and former Lt. Gov. Geoff Duncan refused to do.

On Thursday, Pete Skandalakis, the executive director of the Prosecuting Attorneys Council of Georgia, told CNN that he will appoint a special prosecutor to investigate Jones’ role in the state’s 2020 election interference case, after a judge blocked Willis from investigating him last year.

The indictment lists several emails sent to co-conspirator 9 related to preparations for the fake electors who met on December 14, 2020, including an email from Chesebro “to help coordinate with the other 5 contested States, to help with logistics of the electors in other States hopefully joining in casting their votes on Monday.”

According to emails obtained by the January 6 committee, that email was sent to an account belong to the Georgia GOP treasurer, which at the time was Brannan.

Co-conspirator 9 is also included in the indictment as one of the 13 unindicted co-conspirators who served as fake electors.

Co-conspirators 10 and 11 are Georgia GOP officials Carolyn Fisher and Vikki Consiglio

The indictment says on December 10, 2020, Ken Chesebro sent an email to Georgia state Republican Chair David Shafer and Individuals 9, 10 and 11, with documents that were to be used by Trump electors to create fake certificates.

The January 6 committee obtained as part of its evidence an email from Chesebro sent on December 10 sent to Shafer and three other email addresses. One is for Carolyn Fisher, the former Georgia GOP first vice chair, one is for the Georgia Republican Party treasurer and one is for the Georgia GOP assistant treasurer, the role Consiglio was serving in 2020.

The email contains attachments of memos and certificates that could be used to help swap out the Biden electors with a slate of electors for Trump.

Both co-conspirators 10 and 11 also served as fake electors in Georgia.

Co-conspirators 2 and 8-19 are the fake electors

Of the 30 unindicted co-conspirators, 13 are listed as the fake electors for Donald Trump, who signed papers “unlawfully falsely holding themselves out as the duly elected and qualified presidential electors from the State of Georgia,” according to the indictment.

Three of the 16 Georgia fake electors were charged in the indictment: David Shafer, Shawn Still and Cathleen Alston Latham.

The other 13 fake electors, according to the fake electors certificate published by the National Archives, are Jones (co-conspirator 8), Joseph Brannan (co-conspirator 9), James “Ken” Carroll, Gloria Godwin, David Hanna, Mark Hennessy, Mark Amick, John Downey, Daryl Moody, Brad Carver, CB Yadav and two others who appear to be Individuals 10 and 11.

Several of the fake electors who were not charged are only listed in the indictment for their role signing on as electors for Trump, while others, like Jones, appear in other parts of the indictment as being more actively involved with the alleged conspiracy.

The indictment says Individual 20 was part of a meeting at the White House on December 18, 2020, with Trump, Giuliani and Powell, known to have discussed the possibility of seizing voting machines.

The December 18 meeting featured prominently during some of the hearings from the January 6 committee. All but two of the outside advisers who attended have been named as co-defendants in the indictment already: former Trump national security adviser Michael Flynn and former Overstock.com CEO Patrick Byrne.

The meeting featured fiery exchanges between Trump’s White House lawyers and his team of outside advisers, including on whether to appoint Sidney Powell as special counsel to investigate voter fraud, according to the indictment and previous details that have been disclosed about the meeting.

The outside advisers famously got into a screaming match with Trump’s White House lawyers – Pat Cipollone and Eric Herschmann – at the Oval Office meeting. Cipollone and Herschmann, along with Meadows, pushed back intensely on the proposals, Cipollone and Herschmann testified to the January 6 committee.

Co-conspirators 21 and 22 are Conan Hayes and Todd Sanders

Co-conspirators 21 and 22 are Conan Hayes and Todd Sanders – who are both affiliated with Byrne’s America Project, a conservative advocacy group that contributed funding to Arizona’s Republican ballot audit. Hayes was a former surfer from Hawaii and Sanders has a cybersecurity background in the private sector.

The indictment says on Dec. 21, 2020, Sidney Powell sent an email to the chief operations officer of SullivanStrickler, saying that individual 6, who CNN identified as Waldron, along with individuals 21 and 22, were to immediately “receive a copy of all data” from Dominion’s voting systems in Michigan.

According to the Washington Post, Conan and Todd were the other two people listed on the email to receive the data.

The final eight co-conspirators listed in the indictment are connected to the effort to access voting machines in Georgia’s Coffee County.

Co-conspirator 25 and 29 are a Cyber Ninjas CEO Doug Logan and analyst Jeffrey Lenberg

The indictment says that Misty Hampton allowed co-conspirators 25 and 29 to access non-public areas of the Coffee County elections office on January 18, 2021. Logan and Lenberg were the two outsiders granted access to the elections office that day by Hampton, according to surveillance video previously obtained by CNN. No one else was given access to the office that day, according to a CNN review of the footage.

The indictment also notes that co-conspirator 25 downloaded Coffee County election data that SullivanStrickler then had uploaded to a separate server. Documents previously obtained by CNN show five accounts that downloaded the data – one account belongs to Logan and none of them belong to Lenberg. Still, CNN could not definitively determine who exactly downloaded the data.

Logan and his company conducted the so-called Republican audit of the 2020 ballots cast in Arizona’s Maricopa County.

The indictment says that co-conspirator 28 “sent an e-mail to the Chief Operations Officer of SullivanStrickler LLC” directing him to transmit data copied from Coffee County to co-conspirator 30 and Powell. CNN has previously reported on emails Penrose and Powell arranged upfront payment to a cyber forensics firm that sent a team to Coffee County.

This story has been updated with additional developments.

[ad_2]

Source link

August 2, 2023
Microsoft Outlook will soon write emails for you | CNN Business

[ad_1]

New York
CNN
—

Artificial intelligence could soon be writing more company emails in Microsoft Outlook, as the company expands its rollout of AI tools for corporate users.

The Microsoft 365 Copilot tool – “your everyday AI companion,” as the company bills it – will help users write their emails to “keep your sentences concise and error-free.” The tool also summarizes long email threads to quickly draft suggested replies.

Users with Microsoft 365 Personal or Family subscriptions will get more advanced AI help through Microsoft Editor, an intelligent writing assistant. The update will include suggested edits for “clarity, conciseness, inclusive language and more” to help workers create more “polished and professional” emails, according to a blog post from the company in September.

The company said the tool will be available to more corporate clients starting on November 1. It has already been in months-long testing with customers including Visa, General Motors, KPMG and Lumen Technologies.

In March, Microsoft outlined its plans to bring artificial intelligence to its most recognizable productivity tools, including Outlook, PowerPoint, Excel and Word, with the promise of changing how millions do their work every day. The addition of its AI-powered “copilot” – which will help edit, summarize, create and compare documents – is built on the same technology that underpins ChatGPT.

In addition to writing emails, Microsoft 365 users will be able to summarize meetings and create suggested follow-up action items, request to create a specific chart in Excel, and turn a Word document into a PowerPoint presentation in seconds.

Corporate customers will also get to use Microsoft 365 Chat, previously called Business Chat, which can scan the internet and employee emails, meetings, chats and files, to behave as a sort of personalized secretary.

The expansion will come less than a year after OpenAI publicly released viral AI chat tool ChatGPT, which stunned many users with its impressive ability to generate original essays, stories and song lyrics in response to user prompts. The initial wave of attention on the tool helped renew an arms race among tech companies to develop and deploy similar AI tools in their products.

In the months since, many other companies have rolled out features underpinning or similar to the technology. Microsoft rival Google, for example, has also brought AI to its productivity tools, including Gmail, Sheets and Docs.

[ad_2]

Source link

August 2, 2023
New trove of emails and documents turned over to prosecutors in Georgia election subversion case | CNN Politics

[ad_1]

CNN
—

A trove of emails and documents uncovered by state investigators looking into a voting systems breach in Georgia is being turned over to the Fulton County prosecutors who brought the sweeping racketeering case against former President Donald Trump and his allies.

More than 15,000 emails and documents connected to Misty Hampton, the former election supervisor for Coffee County, were discovered this month by the Georgia Bureau of Investigation – after attorneys for the rural county’s board of elections claimed the information had been lost.

Hampton has been charged alongside Trump and 17 other co-defendants with trying to subvert the 2020 election results in Georgia. She has been accused of facilitating the unlawful breach of Coffee County’s voting systems.

The Georgia Bureau of Investigation had been looking into the Coffee County incident since the summer of 2022. Earlier this month, the agency completed its investigation and gave the case file to Fulton County prosecutors to be included as part of discovery to be turned over to defendants in the Trump election interference case.

While it’s unclear what’s in the trove of emails and documents, the Coffee County breach features prominently in the Fulton County indictment. Prosecutors say Trump allies illegally breached the voting systems in hopes of finding proof that the election was fraudulent. Prosecutors also have evidence tying Trump campaign lawyers to the breach.

Sidney Powell, the former Trump campaign attorney charged with crimes stemming from the Coffee County voting systems breach, has centered her defense around the claim that access to the data was authorized by Hampton. Powell and pro-Trump lawyer Kenneth Chesebro are the first two defendants to go to trial, with jury selection set to begin Friday.

In text messages previously obtained by CNN, Hampton allegedly gave Trump attorneys a “written invitation” to access Georgia voting systems.

RELATED: Georgia prosecutors have messages showing Trump’s team is behind voting system breach

Hampton’s attorney Jonathan Miller said he believes that the newly discovered emails and content will exonerate her.

“There is nothing in the 15,000 emails that would do anything to make my client culpable of a crime, and I look forward to reviewing it all,” Miller told CNN. “She was acting under authority of Georgia statutes in doing what she did, and the evidence is going to show that. She did not commit any crimes.”

Hampton and Powell each face seven charges in Fulton County, including conspiracy to commit election fraud and computer trespassing, in addition to racketeering. A trial date for Hampton has not been set, and Miller said his client has not received a plea offer she is “willing to facilitate.”

All but one defendant, bail bondsman Scott Hall, who has agreed to testify for the prosecution, have pleaded not guilty.

The security of Georgia’s elections had been the subject of litigation even before the 2020 presidential contest. The Coalition for Good Governance, a nonprofit organization, sued the Georgia secretary of state over the issue in 2017. Hampton’s alleged involvement in the Coffee County breach came to light as part of that ongoing civil lawsuit.

“Few people believed the bizarre claims made by the Coffee County Board of Elections and their attorneys that Misty Hampton’s emails were suddenly lost shortly after she was terminated in February 2021,” the coalition said in a statement.

The board of elections did not respond to CNN’s request for comment.

[ad_2]

Source link

August 2, 2023
Judge orders former Trump adviser Peter Navarro to turn over emails from his private account said to be White House records | CNN Politics

[ad_1]

CNN
—

A federal judge has ordered former Donald Trump adviser Peter Navarro to turn over to the US government certain emails from his time at the White House, granting the Justice Department a victory in a civil lawsuit the department brought against the ex-trade adviser.

US District Judge Colleen Kollar-Kotelly said that the emails in question – from a non-official email account Navarro used at the time – were covered under the Presidential Records Act.

“It bears note that under the PRA Dr. Navarro’s obligation to copy from or forward from his personal account to the official account was ‘no later than’ twenty (20) days after the original creation or transmission,” she wrote. “Plainly, he did neither during his tenure in the White House, nor has he forwarded Presidential record emails in the years since.”

She rejected Navarro’s arguments that producing the emails would put at risk his Fifth Amendment right against self-incrimination, as well other arguments Navarro made in the case.

Navarro was ordered by the judge to immediately produce 200 to 250 emails that his lawyers had found when they had done a search, using search terms provided by the the National Archives and Records Administration, of his emails last summer. The Archives had asked him to prioritize the emails that had come up with those search terms.

The judge also ordered that Navarro and the government meet within 30 days to come up with a plan for identifying and turning over the other emails that should be produced under the PRA. She is asking for a status report to be filed by seven days after the parties meet.

When it filed the lawsuit, the Justice Department said that the National Archives had become aware of the emails on Navarro’s private account because of a House investigation into the Trump administration’s response to the Covid-19 pandemic.

[ad_2]

Source link

March 9, 2023
Vanderbilt University apologizes for using ChatGPT to write mass-shooting email | CNN Business

[ad_1]

New York
CNN
—

Vanderbilt University’s Peabody School has apologized to students for using artificial intelligence to write an email about a mass shooting at another university, saying the distribution of the note did not follow the school’s usual processes.

Last Friday, the Tennessee-based school emailed its student body to address the tragedy at Michigan State that killed three students and injured five more people: “The recent Michigan shootings are a tragic reminder of the importance of taking care of each other, particularly in the context of creating inclusive environments,” reads the letter in part, as first reported by the Vanderbilt Hustler, a student newspaper.

At the end of the school’s email was a surprising line: “Paraphrase from OpenAI’s ChatGPT AI language model, personal communication, February 15, 2023,” read a parenthetical in smaller font.

Following an outcry from students about the use of AI to write a letter about community during human tragedy, the associate dean of Peabody sent an apology note the next day. Nicole Joseph, one of the three signatories of the original letter, called using ChatGPT “poor judgment,” according to the Vanderbilt Hustler.

On Tuesday, Vanderbilt said Joseph and assistant dean Hasina Mohyuddin, another signer of the email, have stepped back from their responsibilities while the school conducts a complete review.

“The development and distribution of the initial email did not follow Peabody’s normal processes providing for multiple layers of review before being sent. The university’s administrators, including myself, were unaware of the email before it was sent,” according to a statement Tuesday to CNN from Camilla P. Benbow, the Patricia and Rodes Hart Dean of Education and Human Development.

Since it was made available in late November, ChatGPT has been used to generate original essays, stories and song lyrics in response to user prompts. It has drafted research paper abstracts that fooled some scientists. Some CEOs have even used it to write emails or do accounting work.

While it has gained traction among users, it has also raised some concerns, including about inaccuracies, its potential to perpetuate biases and spread misinformation, and the ability to help students cheat.

Vanderbilt’s letter also included reference to “recent Michigan shootings,” though only one occurred.

“As dean of the college, I remain personally saddened by the loss of life and injuries at Michigan State, which I know have affected members of our own community,” Benbow said. “I am also deeply troubled that a communication from my administration so missed the crucial need for personal connection and empathy during a time of tragedy.”

Rachael Perrotta, editor in chief of the Vanderbilt student newspaper, said that students told her “they are outraged about this situation and confused as to what prompted administrators to turn to ChatGPT to write their message about the Michigan State shooting.”

[ad_2]

Source link

February 24, 2023
FEC dismisses RNC complaint that Google’s spam filters were biased against conservatives | CNN Business

[ad_1]

Washington
CNN
—

The Federal Election Commission has tossed out claims by the Republican National Committee that Google’s spam filters in Gmail are illegally biased against conservatives, according to an agency letter obtained by CNN.

The decision resolves a joint FEC complaint filed last year spearheaded by the RNC that alleged Gmail’s automated filters had sent Republican fundraising emails to spam at a higher rate than for Democratic candidates during the 2020 election cycle. The RNC didn’t immediately respond to a request for comment.

The FEC decision to dismiss the complaint and close the case is the latest defeat for Republicans who have sought on multiple occasions to bring the agency’s powers to bear against tech platforms over allegations of anti-conservative bias. In 2021, the FEC dismissed a similar RNC claim against Twitter over the company’s decision to temporarily suppress the New York Post’s reporting about Hunter Biden’s laptop, saying the content moderation decision appeared to have been made “for a valid commercial reason.”

The FEC took the same stance on the Gmail filtering issue in a letter to Google last week, and which the company provided to CNN on Wednesday.

In the Jan. 11 letter, the FEC said its review “found no reason to believe that [Google] made prohibited in-kind corporate contributions” to Democrats in the form of more favorable email filtering treatment.

In order to be considered a violation, the FEC wrote, “a contribution must be made for the purpose of influencing an election for federal office,” adding that Google’s public statements have made clear its spam filtering exists “for commercial, rather than electoral, purposes.”

Even if it were true that Gmail spam filtering happened to favor Democratic campaigns over Republican ones, the FEC wrote — an allegation the commission neither explicitly endorsed nor rejected — that outcome would not necessarily make Gmail’s underlying conduct an illegal campaign contribution.

In its letter, the FEC cited Google’s public statements claiming that its reasons for spam filtering include blocking malware, phishing attacks and scams.

“In sum, Google has credibly supported its claim that its spam filter is in place for commercial reasons and thus did not constitute a contribution within the meaning of the [Federal Election Campaign Act],” it wrote.

Documents related to the case will be made available to the public by Feb. 10, according to the letter.

“The Commission’s bipartisan decision to dismiss this complaint reaffirms that Gmail does not filter emails for political purposes,” said José Castañeda, a Google spokesperson. “We’ll continue to invest in our Gmail industry-leading spam filters because, as the FEC notes, they’re important to protecting people’s inboxes from receiving unwanted, unsolicited, or dangerous messages.”

While the FEC did not weigh in directly on Gmail’s practices, the letter highlighted the limitations and context surrounding a 2022 academic study that the RNC had leaned heavily upon in its initial complaint.

The study by North Carolina State University researchers had involved an experiment testing the spam filters of Gmail, Microsoft Outlook and Yahoo! Mail. Its findings suggested that of the three email providers, Gmail was the likeliest to mark emails from Republican campaigns as spam.

The RNC had cited the study’s findings as evidence of “illegal, corporate in-kind contributions” to Democratic candidates, including Joe Biden, and called for an FEC investigation.

But the FEC’s letter cited several factors that cast doubt on the RNC’s interpretation of the research, including the study’s own statements of limitations and a Washington Post interview with one of the study’s lead authors, who had said Republicans were “mischaracterizing” the paper.

The study itself acknowledged that it covered a short period of time, and that its findings could have been affected by campaigns’ own tactical decision-making as well as other variables the study did not account for, the FEC wrote, adding that in its response to the RNC allegations Google had said the researchers used a sample of 34 email addresses “when Gmail has 1.5 billion users.”

“Though the NCSU Study appears to demonstrate a disparate impact from Google’s spam filter, it explicitly states that its authors have ‘no reason to believe that there were deliberate attempts from these email services to create these biases to influence the voters,’” the FEC added.

Meanwhile, a separate RNC lawsuit against Google over the same Gmail filtering issue is still ongoing. And Google has continued with an FEC-approved pilot project that allows political campaigns to bypass Gmail’s spam filters. More than 100 political entities are participating in that program, a Google spokesperson told CNN on Wednesday.

[ad_2]

Source link

January 18, 2023
Hackers post email addresses linked to 200 million Twitter accounts, security researchers say | CNN Business

[ad_1]

CNN
—

Email addresses linked to more than 200 million Twitter profiles are currently circulating on underground hacker forums, security experts say. The apparent data leak could expose the real-life identities of anonymous Twitter users and make it easier for criminals to hijack Twitter accounts, the experts warned, or even victims’ accounts on other websites.

The trove of leaked records also includes Twitter users’ names, account handles, follower numbers and the dates the accounts were created, according to forum listings reviewed by security researchers and shared with CNN.

“Bad actors have won the jackpot,” said Rafi Mendelsohn, a spokesman for Cyabra, a social media analysis firm focused on identifying disinformation and inauthentic online behavior. “Previously private data such as emails, handles, and creation date can be leveraged to build smarter and more sophisticated hacking, phishing and disinformation campaigns.”

Some reports suggested the data was collected in 2021 through a bug in Twitter’s systems, a flaw the company fixed in 2022 after a separate incident in July involving 5.4 million Twitter accounts alerted the company to the vulnerability.

Troy Hunt, a security researcher, said Thursday that his analysis of the data “found 211,524,284 unique email addresses” that had been leaked. The Washington Post earlier reported a forum listing promoting the data of 235 million accounts.

Hunt did not immediately respond to a question from CNN asking whether the records would be added to his website, haveibeenpwned.com, which allows users to search hacked records to determine if they have been affected. CNN has not independently verified the records’ authenticity.

Twitter didn’t immediately respond to a request for comment. Its communication team, along with roughly half of Twitter’s overall workforce, was gutted after billionaire Elon Musk completed his acquisition the company in late October. The significant staff reductions could now add to concerns about the company’s ability to respond to security threats.

The breadth of the leaked data could allow malicious actors or repressive governments to connect anonymous Twitter handles with the real names or email addresses of their owners, potentially unmasking dissidents, journalists, activists or other at-risk users around the world, security researchers warn.

“For those people, this is a very consequential breach,” said John Scott-Railton, a security researcher at The University of Toronto’s Citizen Lab.

The account data could also be valuable to hackers who can use the information as part of password-reset attempts and account takeovers. The risk is particularly high for individuals who use the same account credentials on Twitter as they do for other digital services such as banks or cloud storage, researchers said, because hackers could take information gleaned from the leak to pry open user accounts elsewhere.

Verified Twitter users caught up in the apparent leak, or users with particularly large followings, will be particularly valuable targets as a result of the leak, security experts warned, as those account holders may be especially influential celebrities or susceptible to extortion.

To protect themselves from phishing attempts, internet users should use unique passwords for each online service and keep track of them using a digital password manager, security researchers say. They should also enable multi-factor authentication for each of their accounts, and exercise caution when opening unsolicited email or links.

According to the cybersecurity news outlet BleepingComputer, which did claim to test the data, the latest dump appears similar to a leaked dataset advertised on hacking forums in November containing an alleged 400 million records, but slimmed down to eliminate some duplicate records. Twitter has not commented on that leak.

Reports of the leak could expand Twitter’s already significant legal and regulatory risk.

In December, Twitter’s main European privacy regulator, the Irish Data Protection Commission, said it is investigating the July 2022 leak as a possible violation of Europe’s signature privacy law, known as GDPR.

Last summer, the company’s former head of security, Peiter “Mudge” Zatko, filed a whistleblower report to the US government alleging long-ignored security vulnerabilities in Twitter’s operations. Zatko claimed that Twitter’s shortcomings on security reflected a breach of Twitter’s binding commitments to the Federal Trade Commission, a serious offense. (Twitter broadly and repeatedly pushed back at Zatko’s allegations.)

Successive incidents at Twitter have led to the company signing two consent orders with the FTC since 2011 to improve its cybersecurity posture. Violations of FTC orders can lead to fines, business restrictions and even sanctions targeting individual executives.

In November, top Twitter officials responsible for privacy and security resigned from the company, just days after Musk closed his purchase of the platform and amid the mass layoffs that in some cases cut whole departments.

[ad_2]

Source link

January 8, 2023
China-based hackers breached US government email accounts, Microsoft and White House say | CNN Politics

[ad_1]

CNN
—

China-based hackers have breached email accounts at two-dozen organizations, including some United States government agencies, in an apparent spying campaign aimed at acquiring sensitive information, according to statements from Microsoft and the White House late Tuesday.

The full scope of the hack is being investigated, but US officials and Microsoft have been quietly scrambling in recent weeks to assess the impact of the hack, which targeted unclassified email systems, and contain the fallout.

The federal agency where the Chinese hackers were first detected was the State Department, a person familiar with the matter told CNN. The State Department then reported the suspicious activity to Microsoft, the person said.

The Department of Commerce, which has sanctioned Chinese telecom firms, was also breached. The hackers accessed Commerce Secretary Gina Raimondo’s email account, one source familiar with the investigation told CNN. The Washington Post first reported on the access of the secretary’s account.

The Chinese hackers were detected targeting a small number of federal agencies and just a handful of officials’ email accounts at each agency in a hack aimed at specific officials, multiple sources familiar with the investigation told CNN.

“Microsoft notified the (Commerce) Department of a compromise to Microsoft’s Office 365 system, and the Department took immediate action to respond,” a department spokesperson said in a statement on Wednesday.

The spokesperson did not immediately reply to a request for comment on the targeting of Raimondo’s email account.

The hackers targeted email accounts at the House of Representatives, but it was unclear who was targeted and if the breach attempts were successful, two sources familiar with the matter told CNN.

The breaches add to what is already one of the steepest cybersecurity challenges facing the Biden administration: limiting the ability of Beijing’s formidable hacking teams to access US government and corporate secrets.

“Last month, US government safeguards identified an intrusion in Microsoft’s cloud security, which affected unclassified systems,” National Security Council spokesperson Adam Hodge said in a statement to CNN.

“Officials immediately contacted Microsoft to find the source and vulnerability in their cloud service,” Hodge said. “We continue to hold the procurement providers of the US Government to a high security threshold.”

The State Department “detected anomalous activity, took immediate steps to secure our systems, and will continue to closely monitor and quickly respond to any further activity,” a department spokesperson said on Wednesday.

US Capitol Police declined to comment, referring CNN to the FBI.

Hodge did not identify who was behind the hack, but Microsoft executives said in a blog post that the hackers were based in China and focused on espionage.

In response to the Microsoft and White House statements, the Chinese foreign ministry on Wednesday accused Washington of conducting its own hacking operations.

US officials have consistently labeled China as the most advanced of US adversaries in cyberspace, a domain that has repeatedly been a source of bilateral tension in recent years. The FBI has said Beijing has a larger hacking program than all other governments combined.

China has routinely denied the allegations.

The hacking began in mid-May, when the China-based hackers used a stolen sign-in key to burrow their way into email accounts, according to Microsoft. The tech giant has since blocked the hackers from accessing customer emails using that technique, Microsoft said late Tuesday.

Secretary of State Antony Blinken visited China in mid-June, but it was not immediately clear if the cyber-espionage campaign was connected to that high-stakes visit.

Some US officials credited the State Department with investing in more cyber-defense capabilities, allowing the agency to detect the suspicious activity earlier than in past advanced hacks.

The number of US organizations, public or private, impacted by the hacking campaign is in the “single digits,” a senior US Cybersecurity and Infrastructure Security Agency official told reporters on Wednesday.

“This appears to have been a very targeted, surgical campaign,” the official said.

This story has been updated with additional information.

[ad_2]

Source link

April 12, 2021