Russia Claims ‘Increase in Cyberattacks by West Spies’

Just as Western governments are concerned about Chinese or Russian state hackers, the Kremlin worries that its government agencies are under increasing western attack, and is concerned about skill shortages in government.

There has been a significant increase in the number of cyber-attacks conducted by foreign special services on web-servers at Russian state bodies and critical infrastructure since the beginning of the current year, according to recent statements by Nikolai Patrushev, a Secretary of the Russian Security Council, (a consultative body that formulates the Russian President's policies on national security issues).

According to Patrushev, despite repeated warnings to desist, the majority of Russian officials continue to use Western IT-services in their work, a practice which is claimed to be associated with a high threat of information leakage and which opens up the possibility of a remote blockade of their work from abroad.

Patrushev adds that the level of knowledge, skills and abilities of officials responsible for IT security in the Russian state bodies remains poor, with only six percent having specifically studied information security.

Since the beginning of the current year Russian state agencies and bodies have suffered more than 10 million cyber-attacks.

An example was an attack on the web-server of Russia's President Vladimir Putin, (at the end of last year), which resulted in denial of service lasting several hours on the Kremlin's web-servers. Dmitry Peskov, an official spokesman of Russia's President, told SCmagazineUK.com that the attack was conducted from abroad and was organised with the participation of the special services of some foreign states. Other details were not disclosed.

This official web-server of Russia's President has again been subject to cyber-attacks this year, however most attacks are reported to have been prevented by the Russian Federal Security Service at their initial stage.

According to Ilya Sachkov CEO of Group-IB, a Russian private company which specialises in investigation of cyber-crimes, the primary motives for hackers attacking the web-servers of Russian state bodies is for cyber-espionage, as well as for propaganda.

Also, the number of cyber-attacks for political purposes has increased in recent years. The majority of these are DDoS attacks, however there has also been an increase in other types of cyber-attack.

While the extent of US surveillance activity was revealed by Snowden, and the Stuxnet attack on an Iranian nuclear power station is widely understood to have been a US/Israeli operation, western governments have yet to admit offensive cyber-activity - though the UK has formally accepted it as a legitimate option. 

And recently Nato approved language that defines cyberspace as a domain of war. Similarly, Russia and China have denied conducting such operations despite evidence to the contrary. However, it is generally assumed that all governments with the capability to do so currently engage in cyber-espionage.

Sergey Stepanichev, a senior analyst of NPO Energia, a Russian IT company which designs anti-virus software, told SC that the sophistication of cyber-attacks is constantly improving and it is expected that their numbers will significantly increase prior to September elections to the Russian Parliament (State Duma).

Stepanichev has also reiterated that simple installation of anti-virus software is no longer enough to deal with the range of cyber-threats faced, while modern IT security system at state organisations involves building a   monitoring system and the system of information exchange on cyber threats.

SC Magazine

« Industrialisation Of Cybercrime Is Disrupting Business
Ransomware Victims Run Into Millions »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

CYRIN

CYRIN

CYRIN® Cyber Range. Real Tools, Real Attacks, Real Scenarios. See why leading educational institutions and companies in the U.S. have begun to adopt the CYRIN® system.

RioRey

RioRey

The DDoS mitigation specialist, from single server to Enterprise wide carrier level networks the RioRey Solution provides effective immediate and easy to manage protection.

Law Enforcement Cyber Center (LECC)

Law Enforcement Cyber Center (LECC)

LECC is designed to assist police, digital forensic investigators, detectives, and prosecutors who are investigating and preventing crimes that involve technology.

Minerva Labs

Minerva Labs

Minerva’s patent pending solution keeps malware in a constant sleep state before it can infiltrate your network and cause any damage.

Forensic Pathways

Forensic Pathways

Forensic Pathways focus on the provision of digital forensic technologies, offering clients unique technologies in the management of mobile phone data, image analysis and ballistics analysis.

AllegisCyber Capital

AllegisCyber Capital

AllegisCyber is an investment company with a focus on seed and early stage investing in cybersecurity and its applications in emerging technology markets.

Fyde

Fyde

Fyde helps companies with an increasingly distributed workforce mitigate breach risk by enabling secure access to critical enterprise resources.

Aujus Cybersecurity

Aujus Cybersecurity

Aujas is a pure-play cyber security services company with deep expertise in Identity and Access Management, Managed Security and Security Testing services.

X Technologies

X Technologies

X Technologies provide world-class engineering, information technology, information security, program management and repair services to Federal, State and commercial customers.

Electrosoft Services

Electrosoft Services

Electrosoft provide mature, innovative technology-based services and solutions to power critical IT programs and keep our nation safe from cybersecurity attacks.

Oregon Systems

Oregon Systems

Oregon Systems is a Regional Leader & Distributor with value added services for OT, IoT, IIoT & IT Cybersecurity products, Solutions & professional services throughout the middle-east region.

Pillar Technology Partners

Pillar Technology Partners

Pillar Technology Partners is an Information Security Company with a focus on improving Cyber Risk and optimizing the processes and technology that underpin the security of your information assets.

National Information and Cybersecurity Council (NICC) - India

National Information and Cybersecurity Council (NICC) - India

National Information and Cybersecurity Council is a leading collaborative effort between Government of India and Industry to raise Cybersecurity awareness nationally.

Arista Middle East

Arista Middle East

Arista Middle East is part of Global Arista Technologies specializing in OT Cybersecurity.

Databarracks

Databarracks

Databarracks deliver award winning IT resilience and continuity services. We help organisations get the most out of the cloud and protect their data, wherever it lives.

Tenchi Security

Tenchi Security

Tenchi Security are specialized in Third-Party Cyber Risk Management (TPCRM) and aim to reduce information asymmetry when it comes to third and Nth-Party security and compliance risk management.

Skillfield

Skillfield

Skillfield is a Melbourne based Cyber Security and Data Services consultancy and professional services company.