As Trump clinched the Republican nomination, Manafort and those around him began preparing for a general election battle against Clinton.
The Russians did, too. The Internet Research Agency boosted its support of Trump — and disparagement of Clinton. Using stolen identities and bank account information, the troll farm also began buying political ads on social media services, according to Mueller.
“Donald wants to defeat terrorism ... Hillary wants to sponsor it,” read one. “Hillary Clinton Doesn’t Deserve the Black Vote,” read another.
Meanwhile, hackers with the GRU secretly implanted malicious software — called X-Agent — on the computer networks of the DNC and the DCCC. It allowed them to surreptitiously search through the political operatives’ computers and steal what they wanted. As the hackers roamed the Democratic networks, a separate group of Russian intelligence officers established the means to release their ill-gotten gains, registering a website, DCLeaks.com.
By May, the Democratic groups realized they had been hacked. The DNC quickly hired a private cybersecurity company, CrowdStrike, to identify the extent of the breach and to try to clear their networks of malware. But they kept it quiet until they knew more.
On the Trump campaign, Papadopoulos continued to push for a Trump-Putin meeting, unsuccessfully.
At the same time, another Russian outreach found a willing audience in Trump’s eldest son, Donald Trump Jr.
In early June, Trump Jr. exchanged a series of emails with a British publicist representing Emin Agalarov, a pop singer in Russia, whose father had partnered with the Trumps on the 2013 Miss Universe pageant in Moscow. Emin Agalarov and Trump Jr. had become friendly, and the publicist, Rob Goldstone, had become a common intermediary between the two wealthy sons.
Over email, Goldstone brokered a meeting between Trump Jr. and a Russian lawyer. He said the lawyer had documents that could “incriminate” Clinton and they were being shared as part of the Russian government’s support of the Trump campaign. “Seems we have some time and if it’s what you say I love it especially later in the summer,” Trump Jr. wrote back.
The meeting was held at Trump Tower in Manhattan on June 9. Trump Jr. attended along with Manafort and Trump son-in-law Jared Kushner. Participants in the room would later say the meeting was a bust, consumed by a lengthy discussion of Russian adoption and U.S. sanctions. To Trump Jr., the information wasn’t useful ammunition against Clinton. He was less concerned that it came from Russia.
Days later, on June 14, the DNC publicly announced it had been hacked, and pointed the finger at Russia.
By then, the Russian hackers had launched DCLeaks.com. According to Mueller , the DNC announcement accelerated their plans.
They created a fake online persona called Guccifer 2.0, which quickly took credit for the hack. Through Guccifer, the hackers masqueraded as a “lone Romanian hacker” and released caches of stolen material.
The efforts attracted the attention of WikiLeaks, the anti-secrecy group led by Julian Assange from his exile within Ecuador’s embassy in London.
On June 22, 2016, the group sent a private message to Guccifer: “Send any new material here for us to review and it will have a much higher impact than what you are doing.”
Over the next several weeks, WikiLeaks requested any documents related to Clinton, saying they wanted to release them before the Democratic National Convention when they worried she would successfully recruit Sanders supporters.
We “think trump has only a 25% chance of winning against hillary ... so conflict between bernie and hillary is interesting,” WikiLeaks wrote.
Using Guccifer, the Russian intelligence officers transferred the files to WikiLeaks, hoping for a big online splash.
They wouldn’t have to wait long.