Robert Hackett writes:\u00a0 A report out of Arlington, Va.-based cyber security firm Lookingglass reveals a cyber campaign, allegedly Russian, waged against Ukrainian targets, such as the government, law enforcement, and military. The purpose of the state-sponsored espionage has apparently been to gather intelligence on its adversary, bolstering Russian war efforts.<\/p>\n
The researchers dubbed the campaign \u201cOperation Armageddon\u201d. \u201cFor the most part the technologies were not advanced,\u201d says Jason Lewis, chief collection and intelligence office at Lookingglass. \u201cIt\u2019s not super sophisticated, but it\u2019s certainly persistent.\u201d<\/p>\n
Lookingglass researchers worked with neither Ukraine nor Russia in its investigation, sourcing its materials rather from proprietary methods and through sites like VirusTotal, a public database where people can upload and scan files for known viruses.<\/p>\n
Often, the researchers found, the hackers stole documents relevant to the outside conflict from victims\u2019 machines, and then used those files to compromise future targets.<\/p>\n
Once Ukraine\u2019s interim President announced the start of an \u201canti-terrorist operation\u201d against pro-Russian separatists in mid-April 2014, the conflict\u2019s cyber activities significantly increased. From this point onwards, waves of cyber attacks from the Russians directly correlated with the timing of military events and were geared towards gathering intelligence to empower themselves on the physical battlefield \u2013 a digital method of espionage in its truest of forms.<\/p>\n
The Lookingglass researchers, convinced that Russia is the culprit, agree with the Security Service of Ukraine (SBU) that the Russian Federal Security Service (FSB, descendant of the KGB) is to blame. (SBU, too, has called out FSB as being responsible for recent phishing attacks.) \u201cWe\u2019re highly confident that the claims the SBU made are accurate,\u201d Lewis says. \u201cWe didn\u2019t find any evidence to the contrary to dispute those claims.\u201d<\/p>\n
That nation states are using cyber attacks to achieve geopolitical ends should come as no surprise.<\/p>\n
Last year, CrowdStrike associated Chinese cyber espionage campaigns with China\u2019s movement into disputed territory in the South Pacific as well as with an ISIS-led takeover of an Iraqi oil refinery. The security firm FireEye FEYE -1.07% found state actors using attack methods similar to those outlined above to target rebel forces during conflict in Syria. The security firm Cylance recently implicated Iran as having probed critical U.S. energy infrastructure, just prior to nuclear negotiations. And then, of course, there are the claims about Sony Pictures Entertainment and North Korea.<\/p>\n
Espionage and cyber attacks can give countries that engage in the practice an upper hand in international affairs. \u201cNation states need to be able to asses how seriously people will take their threats and what they\u2019ll do as result of a threat,\u201d says Adam Meyers, vice president of intelligence at the security firm CrowdStrike, presenting a rationale for digital incursions. \u201cIt puts them in a better position to make a credible threat if they know what the response is going to be.\u201d<\/p>\n
Indeed, recent reports suggest that Russian spies have penetrated deep inside Ukraine\u2019s intelligence apparatus.<\/p>\n
Robert Hackett writes:\u00a0 A report out of Arlington, Va.-based cyber security firm Lookingglass reveals a cyber campaign, allegedly Russian, waged against Ukrainian targets, such as the government, law enforcement, and military. The purpose of the state-sponsored espionage has apparently been … Continue reading ![\"Hacking](\"http:\/\/www.w-t-w.org\/en\/wp-content\/uploads\/2015\/04\/Hacking-as-War.jpg\")
<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"