FBI disables network of programs used by elite Russian spies

2023-05-09 20:17:26, Kosova & Bota CNA

The FBI has disabled several malicious computer programs used by elite Russian spies, US authorities said on Tuesday, providing a glimpse into the digital showdown between the two cyber superpowers.

Senior law enforcement officials said FBI technical experts had identified and disabled programs used by Russia's FSB security service against an undisclosed number of U.S. computers, a move they hope will deal a blow to deadly one of Russia's main cyber espionage programs.

"We consider this to be their primary tool of espionage," one US official told reporters before the public statement on the matter. He said Washington hoped the operation would "eradicate him from the virtual battlefield".

The official said the FSB spies who used the software, known as "Snake", are part of a notorious hacking group known as "Turla".

The group has been active for two decades, targeting a variety of NATO targets, United States government agencies and technology companies, a senior FBI official said.

Russian diplomats did not immediately respond to requests for comment. Moscow usually denies involvement in cyber espionage operations.

US officials spoke to reporters on Tuesday before the news was released on condition of anonymity. Similar announcements of attempted FSB cyber attacks were made by security agencies in Britain, Canada, Australia and New Zealand.

Turla is widely regarded as one of the most sophisticated hacking teams studied by the security community.

"They have continued to operate in the shadows by focusing on covert and operational security," said John Hultquist, vice president of threat analysis at US cybersecurity company Mandiant. "They are one of the most difficult targets we have encountered."

The US government dubbed the operation to shut down the Snake program "Operation Medusa". The FBI and its partners identified where the online hacking tool was located and built a unique software program to destroy the hacker's infrastructure.

The FBI relied on existing search warrant authorizations to remotely access Russian malware used within victims' US networks and sever its connections.

The senior FBI official said that the tool of the Federal Bureau was created only to communicate with the Russian espionage program./ VOA