NEW! Russia's 2020 playbook: GRU is setting up servers stateside, replacing old servers/email for ProtonMail, evading Facebook ad controls and (!!!) DHS is investigating a possible GRU role in U.S. ransomware attacks. Our months-long investigation is live: https://t.co/7H93BAAUcQ— Nicole Perlroth (@nicoleperlroth) January 10, 2020