Russia Claims ‘Increase in Cyberattacks by West Spies’

Just as Western governments are concerned about Chinese or Russian state hackers, the Kremlin worries that its government agencies are under increasing western attack, and is concerned about skill shortages in government.

There has been a significant increase in the number of cyber-attacks conducted by foreign special services on web-servers at Russian state bodies and critical infrastructure since the beginning of the current year, according to recent statements by Nikolai Patrushev, a Secretary of the Russian Security Council, (a consultative body that formulates the Russian President's policies on national security issues).

According to Patrushev, despite repeated warnings to desist, the majority of Russian officials continue to use Western IT-services in their work, a practice which is claimed to be associated with a high threat of information leakage and which opens up the possibility of a remote blockade of their work from abroad.

Patrushev adds that the level of knowledge, skills and abilities of officials responsible for IT security in the Russian state bodies remains poor, with only six percent having specifically studied information security.

Since the beginning of the current year Russian state agencies and bodies have suffered more than 10 million cyber-attacks.

An example was an attack on the web-server of Russia's President Vladimir Putin, (at the end of last year), which resulted in denial of service lasting several hours on the Kremlin's web-servers. Dmitry Peskov, an official spokesman of Russia's President, told SCmagazineUK.com that the attack was conducted from abroad and was organised with the participation of the special services of some foreign states. Other details were not disclosed.

This official web-server of Russia's President has again been subject to cyber-attacks this year, however most attacks are reported to have been prevented by the Russian Federal Security Service at their initial stage.

According to Ilya Sachkov CEO of Group-IB, a Russian private company which specialises in investigation of cyber-crimes, the primary motives for hackers attacking the web-servers of Russian state bodies is for cyber-espionage, as well as for propaganda.

Also, the number of cyber-attacks for political purposes has increased in recent years. The majority of these are DDoS attacks, however there has also been an increase in other types of cyber-attack.

While the extent of US surveillance activity was revealed by Snowden, and the Stuxnet attack on an Iranian nuclear power station is widely understood to have been a US/Israeli operation, western governments have yet to admit offensive cyber-activity - though the UK has formally accepted it as a legitimate option. 

And recently Nato approved language that defines cyberspace as a domain of war. Similarly, Russia and China have denied conducting such operations despite evidence to the contrary. However, it is generally assumed that all governments with the capability to do so currently engage in cyber-espionage.

Sergey Stepanichev, a senior analyst of NPO Energia, a Russian IT company which designs anti-virus software, told SC that the sophistication of cyber-attacks is constantly improving and it is expected that their numbers will significantly increase prior to September elections to the Russian Parliament (State Duma).

Stepanichev has also reiterated that simple installation of anti-virus software is no longer enough to deal with the range of cyber-threats faced, while modern IT security system at state organisations involves building a   monitoring system and the system of information exchange on cyber threats.

SC Magazine

« Industrialisation Of Cybercrime Is Disrupting Business
Ransomware Victims Run Into Millions »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

IntaForensics

IntaForensics

IntaForensics offer a full range of digital investigation services and are able to adapt to the individual needs of solicitors, private clients, Law Enforcement Agencies and commercial businesses.

Cigniti Technologies

Cigniti Technologies

Cigniti Technologies provides Independent Software Testing (IST) Services including software security testing.

Sogeti

Sogeti

Sogeti deliver solutions that enable digital transformation and offer cutting-edge expertise in Cloud, Cybersecurity, Digital Manufacturing, Quality Assurance, Testing, and emerging technologies.

National Association of State Chief Information Officers (NASCIO)

National Association of State Chief Information Officers (NASCIO)

NASCIO's Cybersecurity Committee focuses helps state CIOs to formulate high-level security and data protection policies and technical controls.

Zix

Zix

Zix offers secure email encryption, threat protection, archiving, DLP and BYOD security for hospitals, financial services, government, and more.

SoftLock

SoftLock

Softlock is a regional leader in Information Security providing solutions, consulting, integration and testing services to protect information assets, identities and supporting infrastructure.

Ensign InfoSecurity

Ensign InfoSecurity

Ensign InfoSecurity is Southeast Asia’s largest pure-play cybersecurity firm.

Asvin

Asvin

Asvin provides secure update management and delivery for Internet of Things - IoT Edge devices.

DataTribe

DataTribe

DataTribe is a cyber startup foundry, leveraging deep experience and expertise to build and launch successful product companies.

GroupSense

GroupSense

GroupSense helps governments and enterprises take control of digital risk with cyber reconnaissance, counterintelligence and monitoring for breached credentials.

DeepView

DeepView

DeepView delivers a unified platform for managing risk on digital platforms. One interactive secure portal allowing employees to engage their networks securely and compliantly.

National Cyber Safety and Security Standards (NCSSS) - India

National Cyber Safety and Security Standards (NCSSS) - India

National Cyber Safety and Security Standards has been started with a great vision to safeguard India from the current threats in the cyber space.

Ethiopian Cybersecurity Association (ECySA)

Ethiopian Cybersecurity Association (ECySA)

ECySA was formed to play an influential part in the ongoing and dawning cybersecurity practices of Ethiopia, efficiently creating public and private awareness on all kinds of cyber risks and threats.

Ghost Security

Ghost Security

Ghost is a venture backed, product-led startup building the new standard in application security for the modern enterprise.

Akto

Akto

Akto, the plug & play API security platform. Discover your APIs, run tests and find business logic vulnerabilities at ludicrous speed.

Eficens Systems

Eficens Systems

Eficens Systems is a global IT services and consulting company. We specialize in empowering businesses to harness the potential of Information Technology as a strategic asset.