<\/div>\n

A group of hackers that defines itself as \u201cfirst-class Russian hackers\u201d claims the defacement of hundreds of local and regional British newspaper websites.<\/h2>\n\n\n\n

A group claiming to be “first-class Russian hackers” defaced numerous local and regional British newspaper websites owned by Newsquest Media Group. The group defaced the home pages of the targeted websites and posted the message “PERVOKLASSNIY RUSSIAN HACKERS ATTACK.” <\/p>\n\n\n\n

The following image shows an archived version<\/a>\u00a0of the East Lothian Courier, which is one of the impacted newspapers, that was published by Reported Future News<\/a>.<\/p>\n\n\n

\n

<\/a><\/figure><\/div>\n\n\n

Newsquest Media Group Limited<\/a><\/strong>\u00a0is the second-largest\u00a0publisher\u00a0of regional and local\u00a0newspapers\u00a0in the United Kingdom. It is owned by the American mass media holding company\u00a0Gannett. It has 205 brands across the UK, publishing online and in print (165 newspaper brands and 40 magazine brands) and reaches 28 million visitors a month online and 6.5 million readers a week in print. Based in\u00a0London, Newsquest employs a total of more than 5,500 people across the UK.<\/gwmw><\/p>\n\n\n\n

Local media websites in the UK are vulnerable to cyber attacks, threat actors can target them to spread fake news. <\/gwmw><\/p>\n\n\n\n

In August 2020, security experts from FireEye uncovered<\/a> a disinformation campaign aimed at discrediting NATO by spreading fake news content on compromised news websites.<\/p>\n\n\n\n

\u201cThe operations have primarily targeted audiences in Lithuania, Latvia, and Poland with anti-North Atlantic Treaty Organization (NATO) narratives, often leveraging website compromises or spoofed email accounts to disseminate fabricated content, including falsified correspondence from military officials\u201d reads the\u00a0report<\/a>\u00a0published by FireEye.<\/em><\/gwmw><\/p>\n\n\n\n

According to FireEye, the campaign tracked as GhostWriter, has been ongoing since at least March 2017 and is aligned with Russian security interests.<\/p>\n\n\n\n

Unlike other disinformation campaigns, GhostWriter doesn\u2019t spread through social networks, instead, threat actors behind this campaign abused compromised content management systems (CMS) of news websites or spoofed email accounts to disseminate fake news.<\/p>\n\n\n\n

The attackers used to replace existing legitimate articles on the sites with the fake content, instead of creating new posts.<\/p>\n\n\n\n

The attackers were spreading fabricated content, including falsified news articles, quotes, correspondence, and other documents designed to appear as coming from military officials and political figures in the target countries.<\/p>\n\n\n\n

According to the experts, the campaign primarily targeted audiences in specific states members of the alliance, including Lithuania, Latvia, and Poland.<\/p>\n\n\n\n

Follow me on Twitter: @securityaffairs<\/strong><\/a> and Facebook<\/strong><\/a> and Mastodon<\/a><\/p>\n\n\n\n

Pierluigi Paganini<\/strong><\/a><\/p>\n\n\n\n

(<\/strong>SecurityAffairs<\/strong><\/a>\u00a0\u2013<\/strong>\u00a0hacking,\u00a0Russian hackers)<\/strong><\/p>\n\n\n\n

<\/gwmw><\/p>\n","protected":false},"excerpt":{"rendered":"

A group of hackers that defines itself as \u201cfirst-class Russian hackers\u201d claims the defacement of hundreds of local and regional British newspaper websites. A group claiming to be “first-class Russian hackers” defaced numerous local and regional British newspaper websites owned by Newsquest Media Group. The group defaced the home pages of the targeted websites and […]<\/p>\n","protected":false},"author":1,"featured_media":163083,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3323,3,5,55],"tags":[6718,4112,9508,9506,10918,687,2528,841,1533],"class_list":["post-163080","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-breaking-news","category-cyber-crime","category-hacking","category-security","tag-disinformation","tag-hacking","tag-hacking-news","tag-information-security-news","tag-it-information-security","tag-pierluigi-paganini","tag-russian-hackers","tag-security-affairs","tag-security-news"],"yoast_head":"\n