Security News > 2020 > October > Russian “government hackers” charged with cybercrimes by the US
You've probably seen the news that six Russians, allegedly employed by the Russian Main Intelligence Directorate, better known as the GRU, have been charged with cybercrimes by the US Department of Justice.
The indictment of the Russian GRU hackers related to the attacks referred to collectively as "Sandworm" is an interesting development in attempts by Western governments to rein in foreign adversary attacks.
As Chester points out above, cybersecurity isn't only, or even predominantly, about heading off state-sponsored attacks, for the simple reason that the same attack techniques work no matter who carries them out.
Attackers find an exploitable software bug before anyone else and start using it before any software patches are available - what's known as a zero-day, because there were zero days during which even an on-the-ball system administrator could have patched proactively.
Many attacks - including the infamous and destructive NotPetya worm that the DOJ attributes to the Sandworm team - relied on exploits for which patches were already available.
News URL
Related news
- US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity servers (source)
- Microsoft and DOJ disrupt Russian FSB hackers' attack infrastructure (source)
- 100+ domains seized to stymie Russian Star Blizzard hackers (source)
- US Government, Microsoft Aim to Disrupt Russian threat actor ‘Star Blizzard’ (source)
- Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday (source)
- Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions (source)
- US says Chinese hackers breached multiple telecom providers (source)
- Russian hackers deliver malicious RDP configuration files to thousands (source)
- US warns of last-minute Iranian and Russian election influence ops (source)
- US indicts Snowflake hackers who extorted $2.5 million from 3 victims (source)