[ethanolburner]

It seems like this incident has impacted not only the U.S. Treasury, but other U.S. government agencies.

The Washington Post also stipulates that the group behind it also hacked FireEye [1].

Makes me wonder if the TTP used for this attack is similar to the FireEye breach (if of course it really was APT29 behind both attacks).

Edit: Reuters reporter Chris Bing says he is hearing the way FireEye got hacked is similar to these government agencies [2].

[1]: https://www.washingtonpost.com/national-security/russian-gov...

[2]: https://twitter.com/Bing_Chris/status/1338233592347045892

[heartbreak]

Here’s the FireEye write up: https://www.fireeye.com/blog/threat-research/2020/12/evasive...