Estonian Free PressEstonian Free Press
  • National Security
    • United States
    • United Kingdom
    • Europe
    • Estonia
    • Latvia
    • Lithuania
    • Moldova
    • Poland
    • Russia
    • Ukraine
  • Counterterrorism
  • Cybersecurity
  • Intelligence

Subscribe to Updates

Get the latest National Security News directly to your inbox.

What's Hot

Extremists Praise ‘Martyr’ Who Attacked FBI’s Cincinnati Office, Declare ‘War’ on FBI ‘Has Begun’

August 12, 2022

DISA Flags Contractors’ Inappropriate Use of Government Computers

August 11, 2022

Labour vows to end ‘outrageous’ energy premiums faced by prepayment customers

August 11, 2022
Facebook Twitter Instagram
  • Privacy Policy
  • Terms and Conditions
  • Contact
Friday, August 12
Estonian Free PressEstonian Free Press
  • National Security
    • United States
    • United Kingdom
    • Europe
    • Estonia
    • Latvia
    • Lithuania
    • Moldova
    • Poland
    • Russia
    • Ukraine
  • Counterterrorism
  • Cybersecurity
  • Intelligence
en English
en Englishet Estonianlv Latvianlt Lithuanianpl Polishro Romanianru Russianuk Ukrainian
Trending
  • Extremists Praise ‘Martyr’ Who Attacked FBI’s Cincinnati Office, Declare ‘War’ on FBI ‘Has Begun’
  • DISA Flags Contractors’ Inappropriate Use of Government Computers
  • Labour vows to end ‘outrageous’ energy premiums faced by prepayment customers
  • Chișinăul instituie control asupra liderilor separatiști de la Tiraspol
  • FBI sought nuclear documents in Trump raid: Report
  • The Inflation Reduction Act sends a foreign-policy message to US friends and foes alike
  • The uncomfortable economic truth behind Xi Jinping’s Taiwan threats
  • Truss putting millions of vulnerable people ‘at risk of real destitution’, says Sunak
Subscribe
Facebook Twitter Instagram
Estonian Free PressEstonian Free Press
Home » Suspected Russian hackers spied on US Treasury emails

Suspected Russian hackers spied on US Treasury emails

December 14, 20204 Mins Read Cybersecurity
Share
Facebook Twitter LinkedIn Pinterest Email

Hackers believed to be working for Russia have been monitoring internal email traffic at the US Treasury and Commerce departments, according to people familiar with the matter, adding they feared the hacks uncovered so far may be the tip of the iceberg.

The hack is so serious it led to a National Security Council meeting at the White House on Saturday (12 December), said one of the people familiar with the matter.

US officials have not said much publicly beyond the Commerce Department confirming there was a breach at one of its agencies and that they asked the Cybersecurity and Infrastructure Security Agency and the FBI to investigate.

National Security Council spokesman John Ullyot added that they “are taking all necessary steps to identify and remedy any possible issues related to this situation.”

The US government has not publicly identified who might be behind the hacking, but three of the people familiar with the investigation said Russia is currently believed to be responsible for the attack. Two of the people said that the breaches are connected to a broad campaign that also involved the recently disclosed hack on FireEye, a major US cybersecurity company with government and commercial contracts.

In a statement posted  to Facebook, the Russian foreign ministry described the allegations as another unfounded attempt by the US media to blame Russia for cyberattacks against US agencies.

The cyber spies are believed to have gotten in by surreptitiously tampering with updates released by IT company SolarWinds, which serves government customers across the executive branch, the military, and the intelligence services, according to two people familiar with the matter. The trick – often referred to as a “supply chain attack” – works by hiding malicious code in the body of legitimate software updates provided to targets by third parties.

In a statement released late Sunday, the Austin, Texas-based company said that updates to its monitoring software released between March and June of this year may have been subverted by what it described as a “highly-sophisticated, targeted and manual supply chain attack by a nation state.”

The company declined to offer any further detail, but the diversity of SolarWind’s customer base has sparked concern within the US intelligence community that other government agencies may be at risk, according to four people briefed on the matter.

SolarWinds says on its website that its customers include most of America’s Fortune 500 companies, the top 10 US telecommunications providers, all five branches of the US military, the State Department, the National Security Agency, and the Office of President of the United States.

‘Huge cyber espionage campaign’

The breach presents a major challenge to the incoming administration of President-elect Joe Biden as officials investigate what information was stolen and try to ascertain what it will be used for. It is not uncommon for large scale cyber investigations to take months or years to complete.

“This is a much bigger story than one single agency,” said one of the people familiar with the matter. “This is a huge cyber espionage campaign targeting the US government and its interests.”

Hackers broke into the NTIA’s office software, Microsoft’s Office 365. Staff emails at the agency were monitored by the hackers for months, sources said.

A Microsoft spokesperson did not respond to a request for comment. Neither did a spokesman for the Treasury Department.

The hackers are “highly sophisticated” and have been able to trick the Microsoft platform’s authentication controls, according to a person familiar with the incident, who spoke on condition of anonymity because they were not allowed to speak to the press.

“This is a nation state,” said a different person briefed on the matter.

The full scope of the breach is unclear. The investigation is still its early stages and involves a range of federal agencies, including the FBI, according to three of the people familiar with the matter.

A spokesperson for the Cybersecurity and Infrastructure Security Agency said they have been “working closely with our agency partners regarding recently discovered activity on government networks. CISA is providing technical assistance to affected entities as they work to identify and mitigate any potential compromises.”

The FBI and US National Security Agency did not respond to a request for comment.

There is some indication that the email compromise at NTIA dates back to this summer, although it was only recently discovered, according to a senior US official.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Telegram Email

Articles Liés

DISA Flags Contractors’ Inappropriate Use of Government Computers

August 11, 2022 Cybersecurity

CISA Releases Toolkit of Free Cybersecurity Resources for Election Community

August 10, 2022 Cybersecurity

U.S. Space Force Conducts Innovative Cyber Talent Acquisition Process

August 10, 2022 Cybersecurity

Information Enterprise Modernization Is an Important DoD Priority, Official Says

August 10, 2022 Cybersecurity

SharpTongue Deploys Clever Mail-Stealing Browser Extension ‘SHARPEXT’

August 9, 2022 Cybersecurity

Headquarters Air Force Directorate of Total Force Integration Conducts Health Assessment at Fort Meade

August 9, 2022 Cybersecurity
Don't Miss
Cybersecurity

DISA Flags Contractors’ Inappropriate Use of Government Computers

By woe whAugust 11, 20220

The following open letter was issued to Defense Information Systems Agency Contractors by Douglas W.…

Labour vows to end ‘outrageous’ energy premiums faced by prepayment customers

August 11, 2022

Chișinăul instituie control asupra liderilor separatiști de la Tiraspol

August 11, 2022

FBI sought nuclear documents in Trump raid: Report

August 11, 2022
Stay In Touch
  • Facebook
  • Twitter
  • Pinterest
  • Instagram
  • YouTube
  • Vimeo
Our Picks

The uncomfortable economic truth behind Xi Jinping’s Taiwan threats

August 11, 2022

Truss putting millions of vulnerable people ‘at risk of real destitution’, says Sunak

August 11, 2022

Gavrilița, întrevedere de rămas bun cu Ambasadorul Lituaniei la Chișinău

August 11, 2022

Liz Truss appears to forget where she is at Conservative hustings

August 11, 2022

Subscribe to Updates

Get the latest National Security News directly to your inbox.

© 2022 Estonian Free Press. All rights reserved.
  • Privacy Policy
  • Terms and Conditions
  • Contact

Type above and press Enter to search. Press Esc to cancel.