Microsoft uncovers Russian website hacking

Microsoft has uncovered new Russian hacking efforts targeting U.S. political groups ahead of the midterm elections.

The company said yesterday that a group tied to the Russian government created fake websites that appeared to spoof two American conservative organizations: the Hudson Institute and the International Republican Institute. Three other fake sites were designed to look as if they belonged to the U.S. Senate.

Microsoft didn’t offer any further description of the fake sites, although it has previously outlined in court filings how this hacking group operated a network of fake sites designed to trick victims into installing malicious software.

The FBI says it’s aware of actions taken by Microsoft to take down the fake websites.

The Russian Foreign Ministry said yesterday that Microsoft lacks any proof of Russian involvement because “there can’t be any.” It said claims by Microsoft are clearly intended to “demonstrate its loyalty” amid “the witch hunt that has engulfed Washington.”

Kremlin spokesman Dmitry Peskov cited the lack of detail on the hack, and said it wasn’t clear “who the hackers in question are” and how they could distort the U.S. electoral system.

Microsoft calls the hacking group Strontium; others call it Fancy Bear or APT28. An indictment from U.S. special counsel Robert Mueller has tied it to Russian’s main intelligence agency, known as the GRU, and to the 2016 email hacking of both the Democratic National Committee and the Hillary Clinton campaign.