Suspected Russian hackers gained access to US homeland security emails

Intelligence value of SolarWinds hacking of then acting secretary Chad Wolf is not publicly known

Suspected Russian hackers gained access to email accounts belonging to the Trump administration’s head of homeland security (DHS) and members of cybersecurity staff whose jobs included hunting threats from foreign countries, the Associated Press (AP) has learned.

The intelligence value of the hacking of then acting secretary Chad Wolf and his staff is not publicly known but the symbolism is stark. Their accounts were accessed in what is known as the SolarWinds intrusion, throwing into question how the US government can protect individuals, companies and institutions if it can’t protect itself.

Continue reading...

Israeli spyware firm NSO Group faces renewed US scrutiny

Department of Justice said to have asked WhatsApp for details of alleged targeting of clients in 2019

NSO Group appears to be facing renewed scrutiny by the US Department of Justice months after leading technology companies said the spyware maker was “powerful and dangerous” and should be held liable to the country’s anti-hacking laws.

DoJ lawyers recently approached the messaging app WhatsApp with technical questions about the alleged targeting of 1,400 of its users by NSO Group’s government clients in 2019, according to a person with knowledge of the matter.

Continue reading...

Russians are ‘likely’ perpetrators of US government hack, official report says

Multi-agency report is the Trump administration’s first statement of attribution for the breaching of at least 10 federal agencies

Russia was “likely” to have been behind a string of hacks of US federal agencies identified last month, according the office of the US director of national intelligence which said the hackers breached fewer than 10 federal agencies.

The office and the FBI, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency inside the Department of Homeland Security, in a joint statement, said the hackers’ goal appeared to be collecting intelligence, rather than any destructive acts.

Continue reading...

Dozens sue Amazon’s Ring after camera hack leads to threats and racial slurs

Class action claims weak security allowed hackers to take over the smart cameras used on doorbells and in homes

Dozens of people who say they were subjected to death threats, racial slurs, and blackmail after their in-home Ring smart cameras were hacked are suing the company over “horrific” invasions of privacy.

A new class action lawsuit alleges that lax security measures at Ring, which is owned by Amazon, allowed hackers to take over their devices. Ring provides home security in the form of smart cameras that are often installed on doorbells or inside people’s comes.

Continue reading...

Revealed: how abusive texts led to discovery of hacking of Al Jazeera

Threatening messages led to monitoring of phone that unearthed evidence of cyber-attack against Qatar-based network

A series of abusive text messages sent to an Al Jazeera investigative programme were the first crumbs that eventually led to the discovery of an unprecedented hacking operation against dozens of staff from the Qatar-based media network, according to one of the journalists who was targeted.

Researchers at Citizen Lab at the University of Toronto claimed on Sunday that the UAE and Saudi Arabia used spyware sold by an Israeli private intelligence company to access the phones of at least 36 journalists, producers and executives from Al Jazeera, as well as that of a London-based reporter with the Al Araby network.

Continue reading...

Dozens of Al Jazeera journalists allegedly hacked using Israeli firm’s spyware

Citizen Lab researchers say cyber-attack using NSO Group software likely ordered by Saudia Arabia and UAE

Spyware sold by an Israeli private intelligence firm was allegedly used to hack the phones of dozens of Al Jazeera journalists in an unprecedented cyber-attack that is likely to have been ordered by Saudi Arabia and the United Arab Emirates, according to leading researchers.

In a stunning new report, researchers at Citizen Lab at the University of Toronto said they discovered what appears to be a major espionage campaign against one of the world’s leading media organisations, which is based in Qatar and has long been a thorn in the side of many of the region’s autocratic regimes.

Continue reading...

Biden mulls punishments for Russia over suspected role in government hack

As president-elect Joe Biden weighed options to punish Russia for its suspected hacking of US government agencies and companies, one leading Republican accused Moscow of “acting with impunity” and others called for retaliatory strikes.

Related: Trump attempt to overturn election is 'nutty and loopy', Romney says

Continue reading...

Trump downplays government hack after Pompeo blames it on Russia

Secretary of state is first in administration to point to Russia but Trump attacks media over reports

Not long after Mike Pompeo became the first member of the Trump administration to blame Russia for wide-ranging hacks of US government agencies and private companies which have sent Washington scrambling to fill the breach, the president sought to play the hack down.

Related: US scrambling to understand fallout of suspected Russia hack

Continue reading...

Mike Pompeo: ‘We can say pretty clearly’ Russia was behind hack of US agencies

Secretary of state blames Russia for worst-ever US government hack as Kremlin denies involvement and Trump stays silent

Mike Pompeo has become the first member of the Trump administration to blame Russia for wide-ranging hacks of US government agencies and private companies.

Related: US scrambling to understand fallout of suspected Russia hack

Continue reading...

Microsoft seeks Biden’s support in case against Israeli spyware firm

Microsoft’s president says NSO Group enables more nation-states to deploy cyber-attacks, including against journalists and activists

Microsoft has called on the incoming Biden administration to weigh in on a high-profile legal case involving WhatsApp and NSO Group, the Israeli spyware firm that the US software company said was helping to proliferate cyber-weapons.

Comparing NSO Group to 21st-century mercenaries, Microsoft’s president, Brad Smith, claimed that the rise of private companies that engineer cybersecurity attacks meant that an increasing number of nation-states could now deploy cyber-attacks – including against journalists and human rights activists.

Continue reading...

US scrambling to understand fallout of suspected Russia hack

At least six government departments breached in likely Russian intelligence operation thought to have begun in March

The US government is still in the dark over how deeply Russian hackers penetrated its networks during the worst ever cyber attack on federal agencies, members of Congress warned on Friday.

At least six government departments were breached in a likely Russian intelligence operation thought to have begun in March. Although there is no evidence that classified networks were compromised, it is not known what the hackers may have stolen or how long it will take to purge them.

Continue reading...

Cyber-attack is brutal reminder of the Russia problem facing Joe Biden

Analysis: new president must find a way to contain such hyper-aggressive behaviour from Moscow

It is Joe Biden’s biggest foreign policy headache. As well as confronting the Covid pandemic, the president-elect has to deal with a more familiar problem: Russia. Moscow’s meddling in the 2016 US presidential election cast a shadow over US politics for four long years.

And now the Kremlin appears to have struck again. This week details emerged of an unprecedented cyber-attack against US government departments. Beginning in March, suspected Russian hackers penetrated Washington’s signature institutions.

Continue reading...

Deep US institutional secrets may have been exposed in hack blamed on Russia

Intrigue surrounds what may have been exposed, from nuclear secrets to Covid vaccine data to next-generation weapons systems

Some of America’s most deeply held institutional secrets may have been stolen in a large hacking operation being blamed on elite Russian government operatives.

Intrigue surrounds what may have been exposed, from nuclear secrets to Covid-19 vaccine data to next-generation weapons systems.

Continue reading...

Trump’s Twitter account was hacked, Dutch ministry confirms

Public prosecutor states Victor Gevers did access US president’s site but as ethical hacker faces no charges

Dutch prosecutors have confirmed that Donald Trump’s Twitter account was hacked in October despite denials from Washington and the company, but said the “ethical hacker” would not face charges.

The hacker, named as Victor Gevers, broke into Trump’s account @realDonaldTrump on 16 October by guessing the US president’s password, Dutch media reports said.

Continue reading...

Orion hack exposed vast number of targets – impact may not be known for a while

Analysis: eavesdropping on high-value targets is labour intensive so hackers may not have made most of access

If there is one silver lining to the months-long global cyber-espionage campaign discovered when a prominent cybersecurity firm learned it had been breached, it might be that the sheer numbers of potentially compromised entities offers them some protection.

By compromising one piece of security software – a security tool called Orion developed by the Texan company SolarWinds – the attackers gained access to an extraordinary array of potential targets in the US alone: more than 425 of the Fortune 500 list of top companies; all of the top 10 telecommunications companies; all five branches of the military; and all of the top five accounting firms.

Continue reading...

Suspected Russian hackers spied on US federal agencies

FBI to investigate after treasury and commerce departments believed to have been targeted

Suspected Russian hackers have carried out the biggest cyber-raid against the US for more than five years, US officials have said, targeting key government networks including the Treasury and commerce departments.

The hackers were able to monitor internal email traffic and may have compromised other government bodies, in what is being described as a highly sophisticated state-level attack. The situation is so grave it led on Saturday to a national security council meeting at the White House.

Continue reading...

Hackers HQ and Space Command: how UK defence budget could be spent

Creation of specialist cyber force and artificial intelligence unit in pipeline

A specialist cyber force of several hundred British hackers has been in the works for nearly three years, although its creation has been partly held back by turf wars between the spy agency GCHQ and the Ministry of Defence, to which the unit is expected to jointly report.

Continue reading...

UK has mounted covert attacks against Russian leadership, says ex-mandarin

Former cabinet secretary Mark Sedwill says UK used offensive cyber-capability to exploit Moscow’s ‘vulnerabilities’

Britain has carried a series of covert attacks on Russia’s leaders and their allies, the former cabinet secretary has disclosed.

Mark Sedwill said the UK had sought to exploit Moscow’s “vulnerabilities”, including through the deployment of its recently declared offensive cyber-capability.

Continue reading...

Twitter softens policy on hacking after row over blocked New York Post story

Move follows criticism from Republicans and others over story about Joe Biden’s son

Twitter has softened its policies against the sharing of hacked material after the backlash over its decision to block a New York Post story about Joe Biden’s son.

Republican senators declared their intention to subpoena the Twitter co-founder, Jack Dorsey next week, forcing him to explain the decision, after he apologised for the lack of communication about the blocking.

Continue reading...

Russia spreading lies about Covid vaccines, says UK military chief

Head of armed forces says both China and Russia trying to undermine cohesion in west

Russia is seeking to destabilise countries around the world by sowing disinformation about coronavirus vaccines that is shared rapidly across social media, the head of the armed forces has warned.

Gen Sir Nick Carter, the chief of defence staff, said the propaganda tactic reflected a strategy of “political warfare” aggressively undertaken by Beijing as well as Moscow “designed to undermine cohesion” across the west.

Continue reading...