{"id":45998,"date":"2017-10-06T05:02:55","date_gmt":"2017-10-06T05:02:55","guid":{"rendered":"https:\/\/www.biphoo.com\/bipnews\/?p=45998"},"modified":"2017-10-06T05:02:55","modified_gmt":"2017-10-06T05:02:55","slug":"russian-government-hackers-used-antivirus-software-steal-u-s-cyber-capabilities","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/news\/russian-government-hackers-used-antivirus-software-steal-u-s-cyber-capabilities.html","title":{"rendered":"Russian government hackers used antivirus software to steal U.S. cyber capabilities"},"content":{"rendered":"

Russian government hackers used antivirus software to steal U.S. cyber capabilities<\/span><\/strong><\/span><\/h2>\n

Russian government hackers used antivirus software to steal U.S. cyber capabilities:- Russian government hackers lifted details of U.S. cyber capabilities from a National Security Agency employee who was running Russian antivirus software on his computer, according to several individuals familiar with the matter.<\/span><\/p>\n

The employee had taken classified material home to work on it on his computer, and his use of Kaspersky Lab antivirus software enabled Russian hackers to see his files, the individuals said. The case, which dates to 2015 and has not been made public, remains under investigation by federal prosecutors.<\/span><\/p>\n

The NSA declined to comment on the breach, which was first reported by the Wall Street Journal.<\/span><\/p>\n

The employee involved was a U.S. citizen born in Vietnam and had worked at Tailored Access Operations, the elite hacking division of the NSA that develops tools to penetrate computers overseas to gather foreign intelligence, said the individuals, who spoke on the condition of anonymity to discuss an ongoing case. He was removed from the job in 2015, but was not thought to have taken the materials for malicious purposes such as handing them to a foreign spy agency, they said.<\/span><\/p>\n

The theft of the material enabled the Russian government to more easily detect and evade U.S. government cyberespionage operations, thwart defensive measures and track U.S. activities, the individuals said. It is the latest in a series of damaging breaches of the NSA in recent years and is among the first concrete indications of why the U.S. intelligence community believes that Kaspersky Lab software operates as a tool for Russian espionage.<\/span><\/p>\n

The breach \u201cserves as a stark warning \u2014 not just to the federal government, but to states, local governments and the American public \u2014 of the serious dangers of using Kaspersky software,\u201d said Sen. Jeanne Shaheen (D-N.H.), a vocal critic of Kaspersky who has pushed for the software\u2019s ban in federal networks.<\/span><\/p>\n

The material the employee took included hacking tools he was helping to develop to replace \u00adothers that were considered compromised following the breach of NSA material by former contractor Edward Snowden, said one individual familiar with the matter.<\/span><\/p>\n

The Washington Post reported the 2015 removal of the employee last November.<\/span><\/p>\n

The incident underscores the risks of using products as seemingly innocuous as antivirus software, which can be leveraged for national security purposes.<\/span><\/p>\n

The breach predates last year\u2019s arrest of former NSA contractor \u00adHarold T. Martin III, who was accused by officials of carrying out what is said to be the largest theft of classified information in U.S. history. Martin pleaded not guilty this year to violating the Espionage Act and is awaiting trial.<\/span><\/p>\n

The intelligence community has long assessed that Kaspersky has ties to the Russian government. A Russian law requires telecommunications companies in the country to provide access to their networks. Kaspersky\u2019s servers are located in Moscow, which means that customer data flowing through its servers passes through those same telecom providers\u2019 networks, a person familiar with the matter told The Post.<\/span><\/p>\n

Kaspersky Lab said in a statement that it \u201cdoes not have inappropriate ties to the Russian government.\u201d<\/span><\/p>\n

\u201cKaspersky Lab has not been provided any evidence substantiating the company\u2019s involvement in the alleged incident,\u201d the company said, \u201cand it is unfortunate that news coverage of unproven claims continue to perpetuate accusations about the company.\u201d<\/span><\/p>\n

Last month, the U.S. government moved to ban the use of Kaspersky security software by federal agencies over concerns it had ties to Kremlin cyberespionage activities. The Department of Homeland Security ordered civilian agencies to identify Kaspersky Lab software on their networks and remove it after 90 days unless otherwise directed.<\/span><\/p>\n

The government said the move was done on the grounds that Kaspersky had connections to the Russian government and that its software posed a security risk. Months earlier, the General Services Administration removed Kaspersky from its list of approved vendors, suggesting a software vulnerability existed with Kaspersky that could give Moscow backdoor access to the very systems the company said it protects.<\/span><\/p>\n

\u201cIt\u2019s a lot harder to beat your opponent when they\u2019re reading your playbook, and it\u2019s even worse when someone on your team gives it to them,\u201d said Sen. Ben Sasse (R-Neb.). \u201cRussia is a clear adversary in cyberspace and we can\u2019t afford these self-inflicted injuries.\u201d<\/span><\/p>\n

All antivirus products, including Kaspersky\u2019s, run in similar fashion. The product is placed on a client\u2019s computer to detect malicious software. To keep the detection capability up to date, the software routinely connects to the antivirus company. That connection is a double-edged sword. It allows the software to be updated, but it also provides an opportunity for the company to inspect files on the computer \u2014 and to remove them.<\/span><\/p>\n

At a Senate Intelligence Committee hearing in May, the chiefs of six major U.S. spy agencies all said they would not use Kaspersky software on their computers.<\/span><\/p>\n

The company\u2019s founder, Eugene Kaspersky, graduated from a KGB-supported cryptography school and had worked in Russian military intelligence.<\/span><\/p>\n

Shaheen has called for a hearing on the matter.<\/span><\/p>\n

\u201cThe strong ties between Kaspersky Lab and the Kremlin are extremely alarming and have been well documented for some time,\u201d Shaheen said. \u201cIt\u2019s astounding and deeply disturbing that the Russian government continues to have this tool at their disposal to harm the United States.\u201d<\/span><\/p>\n

Source:-\u00a0https:\/\/www.washingtonpost.com\/world\/national-security\/russian-government-hackers-exploited-antivirus-software-to-steal-us-cyber-capabilities\/2017\/10\/05\/a01bf546-a9fc-11e7-92d1-58c702d2d975_story.html?utm_term=.604d0ca545ed<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t