In some ways, the tactics are far less advanced, and in others, like hkleaks(.)ru, they feel far more advanced than the IRA. Unreported in that piece, but HKLeaks is behind @DDoSGUARD's CDN and nameservers https://www.buzzfeednews.com/article/rosalindadams/hong-kong-doxing-protesters-china-encourage …
Since that @RosalindZAdams piece, Twitter is now blocking embedded link-backs to hkleaks(.)ru
There was a domain swap between a .org and a .ru, but the hosting has remained behind Netherland-based DDoS-GUARD servers in Russia since it came online in August, according to SecurityTrail records. Wouldn't be surprised if it is directly China-origin, bouncing through their CDN
You can follow @_DanielSinclair.
Tip: mention @threader_app on a Twitter thread with the keyword “compile” to get a link to it.
Enjoy Threader? Sign up.
Threader is an independent project created by only two developers. The site gets 500,000+ visits a month and our iOS Twitter client was featured as an App of the Day by Apple. Running this space is expensive and time consuming. If you find Threader useful, please consider supporting us to make it a sustainable project.