ThreatConnect researchers believe the hacker group that breached the Democratic Congressional Campaign Committee (DCCC) and the Democratic National Committee (DNC) also launched attacks against the World Anti-Doping Agency (WADA) and the Court of Arbitration for Sport’s (CAS).
Researchers believe the state-sponsored APT group Fancy Bear hacked the Olympic drug-testing agency and CAS in retaliation for WADA’s recommendation to ban all Russian athletes from the Olympic and Paralympic games in Rio de Janeiro, Brazil after the whistle was blown on a state sponsored doping scandal, according to an Aug. 19 blog post.
Two domains were identified in phishing emails that spoofed WADA and CAS domain respectively and were sent to members of each org. Researchers linked the emails to domains which used registration and hosting information consistent with Russian FANCY BEAR tactics, techniques, and procedures, the post said.
ThreatConnect notified WADA of its findings.