Link to declassified document with evidence of Russian hacking.

[Igel]

10. Spearphishing.

You get an email.

It contains a link.

Oh, noes, what to do?

Choice A:
You stupidly click on it.

Bam. You're hacked. That email talking about your boss and how he's makin' bacon with the pet pig you got him for Xmas shows up in your boss's twitter feed as you're asking for a raise later in the day.


Choice B:
You delete the email without clicking on the link. If you're really with it, you route all future mail from the sender to junk or spam for mass deletion.

You're not hacked, and there's no evidence that anybody attempted to hack you.


Monday morning quarterback session:
A was hacked. B wasn't hacked. This shows the clear intent of the hacker to support A, because if the hacker was neutral both sets of email would have been publicized. Since B's email wasn't exposed, the hacker's rooting for him.

That's fine, if the hacking really depended entirely on the hacker. (Some Russians tried to hack my personal account today. It's a routine thing. I don't click on links embedded in email.)