KTEP - El Paso, Texas

Russian Hackers Doxxed Me. What Should I Do About It?

Sep 25, 2016
Originally published on September 27, 2016 3:06 pm

It's a strange experience seeing your own passport posted on a pro-Kremlin website.

That's what happened to me last month after Ukraine's Defense Ministry got hacked — including the documents I'd sent there to get press credentials.

The news site showed a letter from my editor, my passport details and identified me as a high-ranking "American adviser" who was in Ukraine to work on a military radio station in that country.

In reality, I was reporting an NPR story on the radio station Army FM, which broadcasts to Ukrainian troops on the country's eastern front, near the border with Russia.

For Ukrainian journalist Alya Shandra, that fabrication is hardly surprising.

"This is how Russian propaganda works — they just take some document that they find somewhere and they send this absurd story around," says Shandra, managing editor of Euromaidan Press. " 'Ukraine is being run by the Americans' — that's their main narrative."

How to respond? In my case, all I could do was get a new passport.

Things get more complicated when it comes to a much more publicized cyberintrusion: the recent allegations that Russia hacked the Democratic National Committee and leaked its internal emails.

Congressional calls to blame Russia

Adam Schiff, a Democratic representative from California, has no doubts about the proper response. The Obama administration, he says, should name and blame Russia.

"I would like to see the administration make public the attribution of responsibility for the hack of the DNC, and I think there's ample evidence," says Schiff, the House Intelligence Committee's top Democrat. "Certainly, we've seen ample evidence — even within the public sources."

Indeed, in a June online posting, the cybersecurity firm CrowdStrike identifies two competing Russian state intelligence services as having intruded in the DNC's network in May. CrowdStrike's incident response group had been hired by the DNC to investigate a suspected computer breach.

But not all cybersecurity experts are rushing to blame the Kremlin.

"The problem with cyberspace is that you can't confirm your suspicions, because anybody can pretend to be anyone," says Jeffrey Carr, CEO and president of Taia Global Inc., a cybersecurity-risk assessment firm.

Carr agrees with other experts that the digital tool used to hack the DNC was made by a Russian company. But he contends there is no conclusive evidence that it was Russian authorities who used it.

"This is why skepticism is so critical when it comes to claims of attribution in cyberspace, because it's very easy to place the blame on a foreign power," Carr adds. "Especially if there's already tension between the U.S. and that other foreign power."

Russian President Vladimir Putin flatly denies having had a hand in the DNC hack.

"I don't know anything about it," he told Bloomberg News in early September. "And on a state level, Russia has never done this."

U.S. response

In an apparent response to Putin's claim of innocence, a few days later U.S. Defense Secretary Ash Carter at the University of Oxford rebuked what he termed "Russia's aggression."

Asserting that the U.S. seeks neither a cold nor a hot war with Russia, Carter nonetheless warned "we will counter attempts to undermine our collective security — and we'll not ignore attempts to interfere with our democratic processes."

It was the closest any administration official had come to publicly suggesting Russia is meddling in the presidential election.

For John McCain, the Republican chairman of the Senate Armed Services Committee, Carter's remarks fell short.

"Is that the best the United States can do?" an outraged McCain demanded at a cybersecurity hearing held a week later.

"Sir, we continue to see activity of concern," was the reply from the hearing's top witness, Adm. Michael Rogers, the chief of the U.S. Cyber Command. But Rogers, who also directs the National Security Agency, declined to name names: "I'm not going to characterize this activity — is it a foreign nation state or not."

The FBI investigates

The official line from the White House has been that before making any attributions of responsibility, it's waiting for the FBI to complete its investigation of the DNC hack.

"I am confident that the Obama administration is going to send the right signals to Russia," says Connecticut Democratic Sen. Chris Murphy. He cites diplomatic reasons for why little has been said or done so far — including recent frustrated efforts to have a U.S.-Russia-sponsored cease-fire in Syria.

"This is not a moment," says Murphy," in which we can shut down a relationship that is vital to the future disposition of potential peace in a place like Syria."

But with Election Day looming, Schiff, the California Democrat, worries time is running out.

"I think if you level with the American people and you say this is what the Russians are doing and we need to protect against this," Schiff argues, "it's far better to alert the public now than to wait until after the election and say, 'OK, this is what happened.' "

And what happens when you get hacked — as both I and the DNC found out — raises a still thornier issue: What, then, do you do about it?

Copyright 2017 NPR. To see more, visit http://www.npr.org/.

RACHEL MARTIN, HOST:

What to do and who to blame when you've been the victim of a cyber intrusion - NPR's David Welna had to find out firsthand.

DAVID WELNA, BYLINE: It's a strange experience seeing your own passport posted on a pro-Kremlin news site. That's what happened to me after Ukraine's Defense Ministry got hacked, including the documents I had sent there to get press credentials. I was identified on that news site as a high-ranking U.S. adviser. The episode does not surprise Ukrainian journalist Alya Shandra.

ALYA SHANDRA: This is how Russian propaganda works. They just take some document that they find somewhere and they send this absurd story around. Ukraine is being run by the Americans. That's their main narrative.

WELNA: The Ukraine Defense Ministry's hacking forced me to get a new passport. Things get even more complicated when it comes to the hack of the Democratic National Committee's emails. Adam Schiff is the top democrat on the House Intelligence Committee. Russia, he says, needs to be named and blamed.

ADAM SCHIFF: I would like to see the administration make public the attribution of responsibility for the hack. There's ample evidence - certainly, we've seen ample evidence even within the public sources.

WELNA: Indeed, there already has been quite a bit of attribution of responsibility by the news media.

(SOUNDBITE OF ARCHIVED RECORDING)

RENE MARSH: The cybersecurity firm called in to investigate tells CNN the perpetrators are affiliated with the Russian government.

WELNA: But not all cybersecurity experts are rushing to blame the Kremlin.

JEFFREY CARR: The problem with cyberspace is that you can't confirm your suspicions because anybody can pretend to be anyone.

WELNA: That's Jeffrey Carr. He heads Taia Global, a cybersecurity firm that assesses the risk of being hacked. He says while the tool used to hack the DNC was made by a Russian company, there's no conclusive evidence it was Russia's authorities who used it.

CARR: And this is why skepticism is so critical when it comes to claims of attribution in cyberspace because it's very easy to place the blame on a foreign power, especially if there's already tension between the U.S. and that other foreign power.

WELNA: Russian President Vladimir Putin, for his part, flatly denies having a hand in the DNC hack. He was asked about it by Bloomberg News.

(SOUNDBITE OF ARCHIVED RECORDING)

PRESIDENT VLADIMIR PUTIN: (Through interpreter) I don't know anything about it. And on a state level, Russia has never done this.

WELNA: A few days after Putin's claim that Russia had never done anything like this on a state level, Defense Secretary Ash Carter spoke in Oxford, England. He declared that while the U.S. wanted neither a cold nor a hot war with Russia...

(SOUNDBITE OF ARCHIVED RECORDING)

ASH CARTER: We will counter attempts to undermine our collective security, and we'll not ignore attempts to interfere with our democratic processes.

WELNA: It was the closest any administration official had come to publicly suggesting Russia is meddling in the presidential election.

(SOUNDBITE OF ARCHIVED RECORDING)

JOHN MCCAIN: Is that the best the United States can do?

WELNA: That's what Senate Armed Services Committee Chairman John McCain wanted to know at a hearing on cybersecurity. Seated before him in the witness chair was Admiral Mike Rogers, commander of the U.S. Cyber Command. While Rogers seemed to sympathize with McCain's frustration over the administration's muted response to the hacks, he would not start naming names.

(SOUNDBITE OF ARCHIVED RECORDING)

MIKE ROGERS: Sir, we continue to see activity of concern. Again, I'm not going to characterize this activity - is it a foreign nation state or not?

WELNA: The official line from the administration is that it's waiting for the FBI to complete an investigation of the DNC hack before making any attributions of responsibility. Connecticut Democratic Senator Chris Murphy says reasons of state, including the recent failing attempt at a cease-fire in Syria, may be why little has been said or done so far.

CHRIS MURPHY: I am confident that the Obama administration is going to send the right signals to Russia, but this is not a moment in which we can shut down a relationship that is vital to the future disposition of potential peace in a place like Syria.

WELNA: But with Election Day only weeks away now, Congressman Schiff says it's past time to publicly pin blame on Russia.

SCHIFF: I think if you level with the American people and you say this is what the Russians are doing and we need to protect against this, it's far better to alert the public now than to wait until after the election and say, OK, this is what happened.

WELNA: And as both I and the DNC found out, what happens when you get hacked raises a thornier issue - what to do about it.

David Welna, NPR News, Washington. Transcript provided by NPR, Copyright NPR.