Israel and Russia's overlapping hacks of Kaspersky complicate espionage narrative




Israel and Russia's overlapping hacks of Kaspersky complicate espionage narrative
Israel and Russia's overlapping hacks of Kaspersky complicate espionage narrative  

The drama between Russian cybersecurity firm Kaspersky and the U.S. government just doesn't quit, but a new report may answer some longstanding questions.

This week, the New York Times revealed that U.S. intelligence was actually tipped off about the Russian government hacking Kaspersky Lab software by Israeli intelligence officers who observed Russia in action during the course of their own spying efforts.

Russia's activities are described as "[searching] computers around the world for the code names of American intelligence programs," indicating that Russian intelligence leveraged the broad permissions required by any antivirus software to turn compromised computers into a kind of searchable database.

While there is much we don't yet know about the Russian government's efforts to hack Kaspersky products, in at least one instance they appear to have resulted in Russia obtaining classified documents from an NSA employee who had stored them on a personal computer that ran Kaspersky software.

The extensive system-wide permissions that antivirus software necessitates and the trust it demands of its users make Kaspersky's products an ideal target for governments wishing to spy on their adversaries. Kaspersky first noticed intrusion by Israel referenced in the New York Times story back in 2015, when it reported that "a sophisticated cyberespionage actor" had infiltrated its systems using code that resembled a previous attack. Kaspersky dubbed the effort "Duqu 2.0" and drew a connection between methods used in the new intrusion and those employed by Stuxnet, a cyber weapon developed for use against Iran by the U.S. and Israel.

On Wednesday, Germany's federal cybersecurity agency BSI told Reuters that it had not detected any threat from Kaspersky software but would work in cooperation with U.S. intelligence agencies.

The whole ordeal is a nightmare for Kaspersky Lab. The company looks incompetent at preventing state-sponsored hacks in the best-case scenario and complicit with the Russian government the worst case scenario. However it plays out, the unfolding drama will certainly hurt the software maker's footprint in the U.S., where Congress has already taken action to purge the government of the company's software.

Kaspersky maintains its desire to "certifiably refute the false accusations" made in the New York Times story,

"Kaspersky Lab has never helped, nor will help, for any government in the world with its cyberespionage efforts, and contrary to erroneous reports, Kaspersky Lab software does not contain any undeclared capabilities such as backdoors as that would be illegal and unethical," the company said in a statement to TechCrunch.

"... For 20 years, Kaspersky Lab has been focused on protecting people and organizations from these cyberthreats - its headquarters' location doesn't change that mission."

COMMENTS

More Related News

NATO concerned Russian missile system breaks Cold War pact
NATO concerned Russian missile system breaks Cold War pact

BRUSSELS (AP) - NATO said Friday that it is concerned about a Russian missile system that could carry nuclear warheads, and which it says could violate a landmark Cold War arms treaty.

Russia to resume flights to Egypt, halted after 2015 bombing
Russia to resume flights to Egypt, halted after 2015 bombing
  • World
  • 2017-12-15 15:58:41Z

MOSCOW (AP) - Russia and Egypt signed a deal Friday to resume flights between Moscow and the Egyptian capital of Cairo starting from February after more than a two-year break, officials announced on Friday.

Putin: U.S. secret services control doping whistleblower Rodchenkov
Putin: U.S. secret services control doping whistleblower Rodchenkov

Russia's former anti-doping chief-turned-whistleblower Grigory Rodchenkov is working under the control of U.S. special services, Russian President Vladimir Putin said on Thursday. The scandal over the 2014 Sochi Olympics, triggered by revelations made by Rodchenkov, is part of a broader doping affair

Putin Declared 'Mission Accomplished' in Syria. What's Next?
Putin Declared 'Mission Accomplished' in Syria. What's Next?

Putin Declared 'Mission Accomplished' in Syria. Vladimir Putin had his own "Mission Accomplished" moment for Syria. In a surprise visit to Hmeimim Air Base in Latakia Province, the Russian president declared that the two-year mission of "assistance" had enabled the Syrian regime of Bashar al-Assad to stabilize itself and regain control of a good portion of the country's territory.

Putin must nudge Syria into U.N. peace deal, mediator says
Putin must nudge Syria into U.N. peace deal, mediator says
  • World
  • 2017-12-13 20:29:59Z

By Stephanie Nebehay GENEVA (Reuters) - U.N. Special Envoy for Syria Staffan de Mistura urged Russia on Wednesday to convince its ally the Syrian government of the need to clinch a peace deal to end the nearly seven-year-old war. De Mistura, speaking on Swiss television station RTS, said failure to

Leave a Comment

Your email address will not be published. Required fields are marked with *

Cancel reply

Comments

Top News: Economy

facebook
Hit "Like"
Don't miss any important news
Thanks, you don't need to show me this anymore.