Большой анонимный фейк / ?: Big Anonymous Fake

On January, 29th appeared a "news" story about the Maidan activists mail accounts being hacked. There was a letter from Andriy Tarasenko (Right Sector activist) to Aslan (supposedly Aslan Omer Kyrymly, an important man in AR Crimea) enclosed.

mishkiss 04.03.14 в 23:48

First, in our media scope this information originated at Sevastopol forum. While there's nothing wrong with the forum itself, the date and the place of insertion are very suspicious and resemble the competent targeting.

mishkiss 05.03.14 в 00:04

Second, the analysis of the message header and comparison with the real headers gives two technical issues:

mishkiss 05.03.14 в 00:06

If the message contains 8-bit symbols (such as Cyrillic letters), by the MIME standards there should be Content-Transfer-Encoding header, which defines the coding format for this 8-bit symbols. All the Cyrillic messages at inet.ua we have found have this header. It's absent on the screen shot.

mishkiss 05.03.14 в 00:08

All the encountered letters from inet.ua web interface include "X-Mailer: freemailer" header, not "X-Mailer: mailer". Google: X-Mailer: mailer vs X-Mailer: freemailer

mishkiss 05.03.14 в 00:10

In a private conversation the employee of one of the mailing system this letter passed through told that the address a.o.k@ciba.com.ua was not among the recipients of the letter with message id n03lwv.tk3saz@newmail.inet.ua. Detailed information about the letter recipients is, of course, private, but it can be stated for sure that the screen shot is fake.

mishkiss 05.03.14 в 00:13

Third, the author of the forum post loses his way when he writes "the Maidan activists mail was hacked", while the letter headers are from the recipient's mailbox (that is, allegedly a.o.k@ciba.com.ua, "Aslan").

mishkiss 05.03.14 в 00:16

Even in the comments to the source many have justified doubts whether the screen shot without any proofs (such as other letters from this mailbox) could be trusted. But the mechanics - to draw a fake and shift the responsibility to Anonymous - has let it be widely reposted.

mishkiss 05.03.14 в 00:19

When we started this group, we hardly imagined the real scale of the informational war (we wish to find another word, but that's the only name for this avalanche of targeted disinformation). Now we face it every day, working through tens of links, but, unfortunately, the decrease of it is yet to be seen. Keep calm and carry on.

mishkiss 05.03.14 в 00:22