Security News > 2023 > February > Russian charged with smuggling US counterintel tech to Motherland
In brief A Russian national has been hit with a five-count indictment alleging he smuggled hardware and software used for counterintelligence operations out of the US to the Russian Federal Security Service and North Korea.
He's being charged with conspiracy to defraud the US, conspiracy to violate the International Emergency Economic Powers Act, two counts of conspiracy to violate the Export Control Reform Act and smuggling.
Per the indictment, Balakaev began smuggling spectrum analyzers and signal generators for the FSB as early as 2017, and as of now is believed to have taken approximately 43 devices out of the country in 14 trips to the US. Co-conspirators are alleged to have shipped several devices to Russia for Balakaev as well.
Spectrum analyzers of the kind Balakaev is accused of smuggling are often used to detect radio signals to identify hidden surveillance devices, while the signal generators are often used to securely transmit information as a part of covert operations.
According to the charges, the hardware Balakaev smuggled to Russia was used to repair similar units owned by the FSB that were manufactured in the US, but for which the Russian government couldn't get parts due to sanctions.
CVSS 9.8 - 2 CVEs: A pair of vulnerabilities in Mitsubishi Electric's MELSOFT iQ App Portal, HTTP request smuggling and insufficient verification of data authenticity, could allow a remote attacker to do quite a bit, including denial of service, IP address authentication bypass, or information disclosure.
News URL
https://go.theregister.com/feed/www.theregister.com/2023/02/27/in_brief_security/
Related news
- US Government, Microsoft Aim to Disrupt Russian threat actor ‘Star Blizzard’ (source)
- US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity servers (source)
- US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech (source)
- US warns of last-minute Iranian and Russian election influence ops (source)
- US space tech giant Maxar discloses employee data breach (source)
- Russian suspected Phobos ransomware admin extradited to US over $16M extortion (source)