US, UK Detail Networking Protocols Abused by Russian Cyberspies

[LASER_oneXM]

Content source

https://www.securityweek.com/us-uk-detail-networking-protocols-abused-russian-cyberspies

A joint technical alert issued on Monday by the United States and the United Kingdom details how cyberspies believed to be working for the Russian government have abused various networking protocols to breach organizations.

According to the Department of Homeland Security (DHS), the Federal Bureau of Investigation (FBI), and the United Kingdom’s National Cyber Security Centre (NCSC), the hackers targeted routers, switches, firewalls, and network-based intrusion detection systems (NIDS). Their main targets have been government and private-sector organizations, critical infrastructure operators, and their Internet service providers (ISPs).

“FBI has high confidence that Russian state-sponsored cyber actors are using compromised routers to conduct man-in-the-middle attacks to support espionage, extract intellectual property, maintain persistent access to victim networks, and potentially lay a foundation for future offensive operations,” the report reads.

The first technical report from the DHS and FBI accusing Russia of cyberattacks was the GRIZZLY STEPPE report published in December 2016. Another technical report blaming Russia for cyber operations was published in March, when the U.S. accused Moscow of campaigns targeting the energy and other critical infrastructure sectors. The alert on critical infrastructure attacks was first released in October 2017, but the attacks had not been openly attributed to Russia at the time.

 

[ForgottenSeer 58943]

This is FUD by the way, another slow dribble of useless information to feed into the Anti-Russian hysteria.

There is literally NOTHING new in all of this that wasn't already known long ago and also wasn't exploited by every national state on the planet with at least 1 'guy' doing some hacking...

Everyone since what.. 5 years+ ago started using GRE encapsulated inside of IPSEC VPN's for security, right?

Who is putting this nonsense out and why?

 

[SumTingWong]

This is FUD by the way, another slow dribble of useless information to feed into the Anti-Russian hysteria.

There is literally NOTHING new in all of this that wasn't already known long ago and also wasn't exploited by every national state on the planet with at least 1 'guy' doing some hacking...

Everyone since what.. 5 years+ ago started using GRE encapsulated inside of IPSEC VPN's for security, right?

Who is putting this nonsense out and why?

Probably Trump's employee. Every time Trump tweet something, I feel like we are getting close to WW3.