Bellingcat journalist Hristo Grozev addressed the Russian GRU on Twitter in connection with an attempt to hack the journalist’s account.
Grozev’s post came a day after Bellingcat published an investigation into the role of the GRU in the 2014 bombings at an ammunition depot in Vrbetica, Czech Republic.
He did not specify whose account was under attack, but wrote:
“Dear GRU, it is a little silly to try to hack with the help of phishing exactly those journalists who have just uncovered your biggest black operation.”
Grozev writes that the GRU “could wait a day or two and generally improve their phishing skills.”
“Transition server on the .ru domain? Clumsy idiots,” he wrote, adding the corresponding screenshot.
Read also: Bellingcat Investigator Names Top 7 World Intelligence Services: Ukraine Among Best and Higher in Russia
Dear GRU, a bit dumb to try to phish-hack exactly the journos who just outed your largest black-op ever. You might have waited a day or two. And generally you might improve your phishing tradecraft. A .ru hop-over server? Bumbling idiots. pic.twitter.com/tPLixrfjSw
– Christo Grozev (@christogrozev) April 21, 2021
In the comments, he also added a screenshot of another email, writing, “They keep trying.”