False clues make it tough to find WADA hackers

Medical data from some of the world’s leading athletes has been posted to the web and the World Anti-Doping Agency says Russians are to blame. Even the hackers seem to agree, adopting the name “Fancy Bears” — a moniker long associated with the Kremlin’s electronic espionage operations. But as cybersecurity experts pore over the hackers’ digital trail, they’re up against a familiar problem. The evidence has been packed with possible red herrings — including registry data pointing to France, Korean characters in the hackers’ code and a server based in California. “Anybody can say they are anyone and it’s hard to disprove,” said Jeffrey Carr, the chief executive of consulting firm Taia Global and something of a professional skeptic when it comes to claims of state-backed hacking.
Many others in the cybersecurity industry see the WADA hack as a straightforward act of Russian revenge, but solid evidence is hard to find. IOC President Thomas Bach said Friday he will ask Russian authorities for help to stop the hackers. Bach said the IOC will help WADA “including communicating with the Russian authorities, to underline the seriousness of the issue and request all possible assistance to stop the hackers”. “This is an unacceptable and outrageous breach of medical confidentiality that attempts to smear innocent athletes who have not committed any doping offense,” said Bach. Later on Friday WADA announced Fancy Bears had posted another selection of hacked data to the web.