PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Russian Hackers Infiltrate Democratic National Committee

They had access to nearly everything, including opposition research on Donald Trump.

 & Tom Brant Managing Editor

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS

Russian government hackers gained access to the computer network of the Democratic National Committee, stealing login credentials and monitoring email and chats, DNC officials and security experts told the Washington Post.

Two separate hacking cells with known ties to the Russian government compromised the DNC's systems, according to Crowdstrike, the security firm that investigated the attack. One cell, known in the security community as Cozy Bear, has had access to the DNC since last summer; the other, Fancy Bear, breached the network in April.

Cozy Bear created a Powershell exploit to gain access, a technique that has also shown up in recent ransomware attacks. In theory, it could have provided access to virtually all parts of the DNC's network. The hacker's connections were encrypted, with different encryption keys on every affected system to help avoid detection.

Fancy Bear, meanwhile, deployed malware called X-Agent, which allows remote command execution, file transmission, and keylogging.

Neither hacking group stole financial, donor, or personal information, indicating their presence was simply for espionage purposes, according to the Post, though they did have access to the entire database of opposition research on GOP presidential candidate Donald Trump. All of the exploits were fixed over the weekend.

Crowdstrike co-founder Dmitri Alperovitch said his firm frequently encounters Cozy Bear and Fancy Bear targeting their clients, and considers them to be some of the best computer hackers he has seen.

"Their tradecraft is superb, operational security second to none and the extensive usage of 'living-off-the-land' techniques enables them to easily bypass many security solutions they encounter," he wrote in a blog post.

Cozy Bear has successfully infiltrated networks of the White House, State Department, and US Joint Chiefs of Staff, as well as numerous private sector organizations, Alperovitch wrote. Fancy Bear, meanwhile, has targeted defense organizations around the world, suggesting they are aligned with GRU, Russia's military intelligence service.

About Our Expert

Tom Brant

Tom Brant

Managing Editor

I’m a managing editor at PCMag.com focused on PC hardware. Reading this during the day? Then you've caught me testing gear and editing reviews of Wi-Fi routers, printers, laptops, and tons of other personal tech. (Reading this at night? Then I’m probably dreaming about all those cool products.) I’ve covered the consumer tech world as an editor, reporter, and analyst since 2015.

I've covered most major consumer tech events, including CES, Computex, Google I/O, and IFA. I've also appeared on CBS News, in USA Today, and at many other outlets to offer analysis on breaking technology news.

Before I joined the tech-journalism ranks, I wrote on topics as diverse as Borneo's rainforests, Middle Eastern airlines, and Big Data's role in presidential elections. A graduate of Middlebury College, I also have a master's degree in journalism and French Studies from New York University.

The Technology I Use

While most people buy a phone or laptop and stick with it for years, I’m lucky enough to use devices based on Android, iOS, macOS, and Windows daily as part of my job. As a result, I cycle through lots of tech in addition to my IT-issue work laptop. (Yes, that's a ThinkPad.) Personally, I’ve also owned a lot of tech products both cutting-edge and cringeworthy, from the Nintendo GameCube and the original MacBook to the Palm m105 and the CueCat.

Read full bio