ie8 fix
madison

Zero Day

Ryan Naraine, Emil Protalinski and Dancho Danchev

Newsweek: Obama, McCain campaigns hacked by 'foreign entity'

By | November 5, 2008, 9:40am PST

Summary: Newsweek is reporting that the computer systems of the campaigns of both Barack Obama and John McCain were compromised in a “sophisticated cyberattack” by an unknown “foreign entity.” At Obama headquarters, what was originally believed to be a virus planted in a phishing attack turned out to something more ominous.  After an investigation, the FBI and [...]

Obama, McCain campaigns hacked by ‘foreign entity’Newsweek is reporting that the computer systems of the campaigns of both Barack Obama and John McCain were compromised in a “sophisticated cyberattack” by an unknown “foreign entity.”

At Obama headquarters, what was originally believed to be a virus planted in a phishing attack turned out to something more ominous.  After an investigation, the FBI and Secret Service issued a dire warning:

  • You have a problem way bigger than what you understand,” an agent told Obama’s team. “You have been compromised, and a serious amount of files have been loaded off your system.”

[ SEE: Obama looking for help thwarting Web site hackers ]
Newsweek reported that the FBI said the McCain campaign’s computer system had been similarly compromised.

  • Officials at the FBI and the White House told the Obama campaign that they believed a foreign entity or organization sought to gather information on the evolution of both camps’ policy positions—information that might be useful in negotiations with a future administration. The Feds assured the Obama team that it had not been hacked by its political opponents.

The FBI declined to comment for the Newsweek story.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.

Topics

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues.

Disclosure

Ryan Naraine

The most important disclosure is of my employment with Kaspersky Lab as a member of the global research and analysis team. Kaspersky Lab is a global company specializing in anti-malware and secure content management technologies. I do not own stocks or other investments in any technology company.

Biography

Ryan Naraine

Ryan Naraine is a journalist and social media enthusiast specializing in Internet and computer security issues. He is currently security evangelist at Kaspersky Lab, an anti-malware company with operations around the globe. He is taking a leadership role in developing the company's online community initiative around secure content management technologies.

Prior to joining Kaspersky Lab, Ryan was Editor-at-Large/Security at eWEEK, leading the magazine's and Web site's coverage of Internet and computer security issues and managing the popular SecurityWatch blog, covering the daily threats, vulnerabilities and IT security technologies. He also covered IT security, hacker attacks and secure content management topics for Jupiter Media's internetnetnews.com.

Ryan can be reached at naraine SHIFT 2 gmail.com. For daily updates on Ryan's activities, follow him on Twitter.

21
Comments

Join the conversation!

Just In

RE: Newsweek: Obama, McCain campaigns hacked by 'foreign entity'
birumut Updated - 5th May 2011
Well done! Thank you very much for professional templates and community edition
seslisohbet seslichat
0 Votes
+ -
back to microfilm and locked filing cabinets
Kungfoofighterx 5th Nov 2008
Problems like this clearly demonstrate why computers are not good tools for groups to use for composing private written materials. Its a lot harder to download a type writer or sneak someone into a room with a hidden camera and a lock picking set. One can easily use pigeons to fairy messages between cities. It works way better than email and pigeons make nice pets. I hear they are also tasty. Let computers crunch numbers. I'm heading the store right now to buy a typewriter.
0 Votes
+ -
...why don't we just exclude the middleman...i.e. the pigeons, and use the "fairies" to ferry the messages instead?

wink
0 Votes
+ -
NT
0 Votes
+ -
OR you could just..
AzuMao 5th Nov 2008
Unplug the ethernet cable from your the computer
storing your uber secret information.

Best firewall ever.


P.S. I know that you're just kidding, but I felt like
I should completely demolish any chance of someone
else possibly taking what you said seriously, just to
be the on safe side. ^^
0 Votes
+ -
Wasn't serious?
s_southern 6th Nov 2008
Gah! Now I have to run all the way back to purchasing to cancel the purchase orders that he's typing up for those pigeons! In the past I could have called him, but people can record those conversations...
0 Votes
+ -
2 cans and a length of string
GASGTO73@... 6th Nov 2008
a secure network ?..
i think we need to go back to horse and buggy with a
military escort.
Where's the beef? (thanks, Clara!)

This article is like saying "Somebody did something today. We can't get anyone to comment in time for publication."
Tacocat is a palindrome.
Design and build a dedicated file server for delicate files, encrypt it as best as it can be done and supply a single password. No back doors, no work-arounds, no booting from a floppy or CD and all the things we know to do in case we forget the password. Make it secure. Forgot the password? Well knucklehead, you want it secured or not?
0 Votes
+ -
good idea
dcdavy 5th Nov 2008
I agree. Make a good file server. No backdoors. No password reset CDs. No strange open ports. But then ... how is the Big Brother going to sneak into terrorist's computer if it is so perfectly secured ? So I guess we'll have to live with hacks and cracks for the near future.
0 Votes
+ -
Simple truths
RationalGuy 5th Nov 2008
No system can be "secure"
All locks have keys
All keys can be recreated

The level of security in a system is simply a function of how much time it takes to recreate the key.
0 Votes
+ -
re: hacked by 'foreign entity'
bgonetoo 5th Nov 2008
look to the ruskies..................
0 Votes
+ -
If it happened it could be nearly anyone from someone in the US Spooks to Tuava.

TBH, while ever there's a fighting chance that the US GOV continues to behave like a demented child on the world stage, it could be anybody who has enough intelligence to be scared.
0 Votes
+ -
you mean hacked by an ally?
longyhoo 5th Nov 2008
No one will comment if the hacking was from a foreign ip address, known foreign agents, or, if agents know but won't say who did the hacking.
0 Votes
+ -
If they have located an IP
rodonn 6th Nov 2008
then it was by someone who was reasonably incompetent. So that places in Script Kid or Govt realms.
When the FBI says "loaded off", it should be made
clear that they don't mean "erased", they mean
"downloaded", as in "copies made onto the cracker's
computer".

Also, do they mean the public websites for both
campaigns (where sensitive document have no
business being), or other systems unrelated to their
public campaign websites?
Do not use no Microsoft products if you need some security.
In the realm of risk, unmanaged possibilities become probabilities: These data breaches and thefts are due to a lagging business culture. As CIO, I'm always looking for ways to help my team, business teams, and ad hoc measures of various vendors, contractors and internal team members. A book that is required reading is "I.T. WARS: Managing the Business-Technology Weave in the New Millennium."
We keep a few copies kicking around - it would be a bit much to expect outside agencies to purchase it on our say-so. But, particularly when entertaining bids for projects and in the face of challenging change, we ask potential solutions partners to review relevant parts of the book, and it ensures that these agencies understand our values and practices.
The author, David Scott, has an interview here that is a great exposure: http://businessforum.com/DScott_02.html
The book came to us as a tip from one of our interns who attended a course at University of Wisconsin, where the book is in use. It has helped us to understand that, while various systems of security are important, no system can overcome laxity, ignorance, or deliberate intent to harm. The real crux of the matter is education and training to the organization as a whole ??? and a recurring schedule of training ??? in building a sustained culture and awareness; an efficient prism through which every activity is viewed from a security perspective prior to action.
I like to pass along things that work, in the hope that good ideas continue to make their way to me.
So Bush/Cheney et al are now referred to as 'Foreign Entity'?
Well done! Thank you very much for professional templates and community edition
seslisohbet seslichat

Join the conversation!

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity

White Papers, Webcasts, & Resources
ie8 fix
ie8 fix