
He meant to reply that the email was “illegitimate”. There were two missing letters – “i” and “l” – that should have preceded the word “legitimate”.Īs Delavan told the NYT, he knew the email was a phishing attack, given that the Clinton campaign was getting a steady stream of them.
#Cuddle phish for mac gif password#
The email, purportedly from Google, said that hackers had tried to infiltrate Podesta’s Gmail account.Ĭlinton campaign aide Charles Delavan replied that yes, the message was “a legitimate e-mail” and that Podesta should “change his password immediately”. Rather, an aide forwarded a phishing email sent to Podesta, sending it to the campaign’s IT staff to ask if the notice was for real. How could John Podesta and others have fallen for the phish?Įarlier this week, in an in-depth report on Russian cyberattacks, the New York Times revealed how Podesta’s credentials were given up because of the simplest of errors: a mere two missing letters: he was caught out by a typo. Those intrusions set off a political firestorm after a trove containing 10 years’ worth of Hillary Clinton’s emails were leaked and published on WikiLeaks.

In October, officials formally identified the Russian government as the source of intrusions into DNC systems. Over the past few months, the Feds have come to agree.

…and the Democratic National Committee (DNC)?īack in July, security firm SecureWorks pointed the finger at Russia: over the course of the past year, it’s been tracking the Russian hacking group Fancy Bear and its spearphishing attacks, launched with shortened Bit.ly URLs to trick victims into giving over their Gmail credentials to fake login pages. Who hacked Clinton campaign chairman John Podesta?
