> Berulis said he and his colleagues grew even more alarmed when they noticed nearly two dozen login attempts from a Russian Internet address (83.149.30,186) that presented valid login credentials for a DOGE employee account
> “Whoever was attempting to log in was using one of the newly created accounts that were used in the other DOGE related activities and it appeared they had the correct username and password due to the authentication flow only stopping them due to our no-out-of-country logins policy activating,” Berulis wrote. “There were more than 20 such attempts, and what is particularly concerning is that many of these login attempts occurred within 15 minutes of the accounts being created by DOGE engineers.”
https://krebsonsecurity.com/2025/04/whistleblower-doge-sipho...
I’m surprised this didn’t make bigger news.
Every time I see post-DOGE kvetching about foreign governments' hacking attempts, I'm quite bewildered. Guys, it's done, we're fully and thoroughly hacked already. Obviously I don't know if Elon or Big Balls have already given Putin data on all American military personnel, but I do know, that we're always one ketamine trip gone wrong away from such event.
The absolute craziest heist just went in front of our eyes, and everyone collectively shrugged off and moved on, presumably to enjoy spy novels, where the most hidden subversion attempts are getting caught by the cunning agents.