New Russian malware could bring down the US power grid

As if you didn’t have enough to worry about. Who will bring down America’s power grid first? Joe Biden or Vladimir Putin? Biden has a head start, to be sure. But some Russian hackers have reportedly cooked up some new malware designed specifically to target electrical grids and cause disruptions. The new threat was discovered by Mandiant, a cyber threat intelligence specialist firm. They believe that this new malware system “poses a plausible threat” to the operational technology behind various electrical grid assets. (Security Week)

Share

The Snake, The FBI, And Center 16: Why The Takedown Of A ‘Most Sophisticated Cyber-Espionage Tool’ Is Important

For more than a decade, a unique bit of malicious computer code was burrowed in the deepest corners of Internet servers in more than 50 countries, secretly gathering data and even records of what a person might be typing on a keyboard. Important information was extracted and covertly sent via a network of other infected computers, hiding its tracks from easy detection, back to the code’s creators.

Called various names — Snake, Uroburos, Venomous Bear — the malware was suspected in a damaging hack of Germany’s Foreign Ministry in 2017. NATO computers were reportedly compromised. The personal computer of a journalist who worked for a U.S. news organization and reported on the Russian government was reportedly targeted.

Share

A pro-Russian hacking group may have targeted Canada’s energy infrastructure.

A hacking group, under the guidance of Russia’s Federal Security Service, may have compromised the I.P. address of a Canadian gas pipeline company in February and caused damage to its infrastructure, according to leaked Pentagon documents.

If the attack by the cybercriminal group, Zarya, succeeded, the intelligence report said, “it would mark the first time” the United States intelligence community “has observed a pro-Russia-hacking group execute a disruptive attack against Western industrial control systems.”

(more…)

Share

Revealed: the hacking and disinformation team meddling in elections

A team of Israeli contractors who claim to have manipulated more than 30 elections around the world using hacking, sabotage and automated disinformation on social media has been exposed in a new investigation.

The unit is run by Tal Hanan, a 50-year-old former Israeli special forces operative who now works privately using the pseudonym “Jorge”, and appears to have been working under the radar in elections in various countries for more than two decades.

He is being unmasked by an international consortium of journalists. Hanan and his unit, which uses the codename “Team Jorge”, have been exposed by undercover footage and documents leaked to the Guardian.

Share

Russian cyber threat worse than previously reported: CSE

Russia’s cyber operations following its invasion of Ukraine have “almost certainly” been more extensive than what has been publicly reported, and Canada is among the targets, the Communications Security Establishment said.

The CSE’s Canadian Centre for Cybersecurity said in a threat bulletin issued Thursday “the scope and severity of cyber operations related to the Russian invasion of Ukraine has almost certainly been more sophisticated and widespread than has been reported in open sources.”

Share

Cyber spy agency targeted foreign extremists trying to recruit Canadians: report

 

Canada’s electronic spy agency says it’s used its arsenal to try and stop foreign extremists from recruiting Canadians and sharing violent material online.

The acknowledgement is nestled in the Communications Security Establishment’s annual report made public Tuesday, which points to recent cases where it flexed its cyber muscles.

While the details are largely sanitized in the report, the examples shed some light on how the foreign signals intelligence agency has been using the “active” cyber capabilities granted to it by the Liberal government in 2019.

Share

Canada on ‘high alert’ for cyberattacks from Russia, others: minister

The Canadian government is on “high alert” for cyberattacks by Russia and others amid a global threat environment that continues to shake the foundations of the post-second World War international order.

Public Safety Minister Marco Mendicino issued the warning during an appearance at the House of Commons public safety committee on Thursday morning. He told members of the committee that the threat is not just to the federal government but also to provinces and critical infrastructure.

Share

Canada directs military to take more ‘assertive’ stance in cyberspace

The Canadian government has directed its military to take a more “assertive” stance in cyberspace in anticipation of electronic warfare becoming a more central component in conflict, documents obtained by Global News suggest.

A “cyber playbook” prepared by the Canadian Armed Forces and the Department of National Defence comes as Ottawa pushes for international rules and norms around cyber espionage and warfare.

Share

Canada, allies warn of Russian cyberattacks on critical infrastructure due to Ukraine war

Western governments jointly warned on Wednesday about a potential threat of increased malicious cyber activity by Russia against critical infrastructure as a response to sanctions imposed as punishment for its invasion of Ukraine.

The cybersecurity agencies of the United States, Britain, Australia, Canada and New Zealand that together form the Five Eyes intelligence-sharing alliance said the war could expose organizations everywhere to cyber crime.

Share

Companies were slow to remove Russian spies’ malware, so FBI did it for them

How the FBI took down “Cyclops Blink,” a Russia state botnet infecting network firewalls.

The FBI remotely accessed and disinfected US-located devices running a powerful new strain of Russian state botnet malware, federal authorities said Wednesday. Those authorities added that the Kremlin was using the malware to wage stealthy hacks of its adversaries.

The infected devices were primarily made up of firewall appliances from WatchGuard and, to a lesser extent, network devices from Asus. Both manufacturers recently issued advisories providing recommendations for hardening or disinfecting devices infected by the botnet, known as Cyclops Blink. It is the latest botnet malware from Russia’s Sandworm, which is among the world’s most elite and destructive state-sponsored hacking outfits.

Share

Kaspersky antivirus software added to US national security risk list

Antivirus software maker Kaspersky Labs has been added to a federal list of companies that pose “an unacceptable risk to the national security of the United States.”

The Moscow-based cybersecurity firm, which says it has more than 400 million users worldwide, was added to the Federal Communications Commission’s list of restricted entities on Friday alongside two Chinese companies.

Share

How bad could a Russian cyberattack be?

 

Containing the attack is the problem

When I have designed wargames around a NATO-Russia conflict, I often left out cyberattacks for a simple reason: it was just too complicated. Too many unknowns make an accurate simulation impossible.

The number of targets, scale of the attack, damage done, how the attack could be carried out and its ramifications were beyond calculation for a mere simulation on the scale I was running using just consumer-based computer technology.

Honestly, nuclear war seemed easier to think about, and that says a lot.

Share

‘It’s the right thing to do’: the 300,000 volunteer hackers coming together to fight Russia

Ukraine appealed for a global army of IT experts to help in the battle against Putin – and many answered the call.

Kali learned how to use technology by playing with his grandfather’s phone. Now, the Swiss teenager is trying to paralyse the digital presence of the Russian government and the Belarussian railway.

Kali – and many others who contributed to this article – declined to share his real name because some of the action he is taking is illegal and because he fears Russian retaliation. He is one of about 300,000 people who have signed up to a group on the chat app Telegram called “IT Army of Ukraine”, through which participants are assigned tasks designed to take the fight to Vladimir Putin. In so doing, they are trying to level the playing field between one of the world’s superpowers and Ukraine as it faces bombardment and invasion.

Share