this post was submitted on 01 Aug 2026
135 points (98.6% liked)
AntiTrumpAlliance
1745 readers
57 users here now
About
An alliance among all who oppose Donald Trump's actions, positions, cabinet, supporters, policies, or motives. This alliance includes anyone from the left or the right; anyone from any religion or lack thereof; anyone from any country or state; any man, woman or child.
Rules
-No pro-Trump posts or comments
-No off topic posts
-Be civil
-No trolling
-Follow Lemmy terms of service
Social Media
Other Communities
!desantisthreatensusa@lemmy.world
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Bullshit. I personally worked on the incident that happened to St Paul municipal and water systems last year as the Incident Response Technical lead.
The threat actors were not Iranian then. They were Russian.
I personally rebuilt most of their networks, VMware hosts, storage, and servers. The majority of the VMware environments did not have config backups and were running 5 and 6 branches of VMware, only two had 7+.
I had my team compile a massive set of recommendations for them and I wrote the report. Water Systems specifically. They did not listen to us, apparently. The forensics team also did this.
They had FBI, national guard (fucking incompetent), and law enforcement (useless) in all meetings.
If they got into Water, they'll get back into city and municipal again. I guarantee it.
... thats... not reassuring.
... wonderful.
Yeah, from the outside... Russians makes the most sense. I don't think China would be this bold, Iran? Probably not skilled enough.
I... guess it could be possible the Russians are essentially doing it on behalf of Iran, in some way, but... probably no real way to prove that either way.
China doesn't target low-value entities like this. They're going after bigger fish and using much more subversive methods. They deploy people on the ground. Look into the Chinese Police Stations that are all over the USA, Canada, and other countries. Illegal AF.
China gets people to go work for large corps, government entities, and other places, and has them extract data that way.
Also, what's with your use of ellipses? I don't understand.
I (over)use them to indicate pauses or hesitation.
Stylistic flair.
I didn't realize the Chinese used so many ... on the ground facilitators... that's a very aggressive tactic.
That does make sense though, all you've said.
I was aware that yes, they typically went for... basically extremely high value data... i would think that persistent presence, or, almost that, basically, in essentially many state municipal systems... would essentially be a strategic weapon/tool... didn't think they'd be so bold as to flip all that on, now. I'd have figured they'd wait for a more specific, opportune moment.
But from what you're saying... sounds like they're mostly interested in acquisition, extraction.
You think it was Iran, I presume?
I do not. If I were to bet, I would guess it's the same people or related groups to the last incident.
Russian state policy is to allow any sort of hacking as long as it's not aimed at Russian assets. No penalty. These groups just want their bag.
Ok good point. It’s possible also that Russia or China can collab with or act for Iran, or use it as cover as you suggest right.
I think they're implying that it's not actually a nation state threat actor, that Russian cyber criminals looking to exploit systems for money are able to act with impunity so long as they don't target Russians (hence "want their bag"). Most incidents are financially motivated.
From my perspective, you're not wrong. Information sharing is a thing and all of them have a common interest of diminishing USA hegemony.