SPY5H_190507_433
Existing comment: Digital Invaders!

Hackers inside Russian took control of this server in 1998. It was one of their main access points into US government networks in the Moonlight Maze cyberattack.

Turla, a current Russian hacker group believed to have Kremlin ties, still uses computer code from Moonlight Maze. This suggests that Turla evolved from those 1990s Russian hackers.

It became one of history's longest-lived cyberespionage operations.

--

Moonlight Maze
From Wikipedia, the free encyclopedia

Moonlight Maze was a 1999 US government investigation into a massive data breach of classified information. It started in 1996 and affected NASA, the Pentagon, military contractors, civilian academics, the DOE, and numerous other American government agencies. By the end of 1999, the Moonlight Maze task force was composed of forty specialists from Law Enforcement, Military, and Government. The investigators claimed that if all the information stolen was printed out and stacked, it would be three times the height of the Washington monument (which is more than 550 ft tall). The Russian government was blamed for the attacks, although there was initially little hard evidence to back up the US' accusations besides a Russian IP address that was traced to the hack. Moonlight Maze represents one of the first widely known cyber-espionage campaigns in world history. It was even classified as an Advanced Persistent Threat (a very serious designation for stealthy computer network threat actors, typically a nation state or state-sponsored group) after two years of constant assault. Although Moonlight Maze was regarded as an isolated attack for many years, unrelated investigations revealed that the threat actor involved in the attack continued to be active and employ similar methods until as recently as 2016.
Modify description