Security News > 2020 > October > U.S. Levies Sanctions Against Russian Research Institution Linked to Triton Malware
The latest in a flurry of actions this week, tied to foreign threats against U.S. computer systems, includes sanctions by the Department of the Treasury.
The Trump administration sanctioned a Russia government research institution on Friday claiming it was behind a series of cyberattacks using the highly destructive Triton malware.
The Department of the Treasury's Office of Foreign Assets Control said the Triton malware had been used in various attacks against U.S. partners in the Middle East and spotted probing U.S. facilities.
"This cyber-attack was supported by the State Research Center of the Russian Federation FGUP Central Scientific Research Institute of Chemistry and Mechanics, a Russian government-controlled research institution that is responsible for building customized tools that enabled the attack," according to a Treasury Department statement issued Friday.
On Friday, the Department of Treasury accused the TsNIIKhM of "Knowingly engaging in significant activities undermining cybersecurity against any person, including a democratic institution, or government on behalf of the Government of the Russian Federation", pursuant to Section 224 of the Countering America's Adversaries Through Sanctions Act.
News URL
https://threatpost.com/us-sanctions-russian-triton-malware/160518/
Related news
- YARA: Open-source tool for malware research (source)
- Russian Espionage Group Targets Ukrainian Military with Malware via Telegram (source)
- Russian charged by U.S. for creating RedLine infostealer malware (source)
- Uncle Sam outs a Russian accused of developing Redline infostealing malware (source)
- Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails (source)
- Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia (source)