This browser is not actively supported anymore. For the best passle experience, we strongly recommend you upgrade your browser.
Insights Insights
| less than a minute read

US Acting Against Russian State Cyber Attacks

The US federal government, along with other western governments allied with Ukraine, is working to disable Russian state cyber actions. The FBI has revealed that US officials took down a "botnet" run by the Russian intelligence agency (GRU) in March. The botnet and GRU aim to attack western interests in connection with the ongoing war in Ukraine.  

Why It Matters

The US federal government has been warning American businesses for several weeks now to harden their defenses against Russian cyber attacks. Officials expect Russian state actors to work against Ukraine's western allies using cyber warfare tactics and have shared threat intelligence publicly to back up those warnings. The fact that federal law enforcement is also working to disable or prevent such attacks -- and sharing some of those actions -- underscores the threat they perceive to US interests. Company owners would be well served to continue their vigilance against attack, by updating software (especially malware and virus scanners), hardware that can run the latest OS, MFA configurations, and employee awareness training.  

The botnet that U.S. officials say was disrupted in March used malware that targeted devices manufactured by WatchGuard Technologies Inc. and ASUSTek Computer Inc., according to the DOJ. Because the devices were on the perimeter of victim networks, gaining access to them allowed Sandworm the chance to attack all computers within those networks, U.S. officials said.

Tags

cyber attack, ukraine, russia, fbi, small business, insights, hill_mitzi, data security and privacy