Tag: NSA

  • US intelligence chiefs doubt Kaspersky potency after WannaCry ransomware attack

    US intelligence chiefs doubt Kaspersky potency after WannaCry ransomware attack

    Top US intelligence chiefs on Thursday publicly expressed doubts about global cybersecurity firm, Kaspersky Labs because of its roots in Russia.

    Six leading intelligence officials told a Senate hearing on external threats to the United States of their concerns over the firm’s broad presence, without specifying any particular threat.

    Asked if he was aware of a security threat tied to Kaspersky software, Federal Bureau of Investigation acting director Andrew McCabe replied: “We are very concerned about it and we are focused on it very closely.”

    Defense Intelligence Agency director Lieutenant General Vincent Stewart said his agency is avoiding the company’s products.

    ImageFile: US intelligence chiefs doubt Kaspersky potency after WannaCry ransomware attack
    Heads of the United States intelligence agencies

    “There is, as well as I know, no Kaspersky software on our networks,” he said, adding that the agency’s private sector contractors are also steering clear.

    Also indicating their concerns in brief were the heads of the Central Intelligence Agency, the National Security Agency, the National Geospatial Intelligence Agency and the Director of National Intelligence.

    “I am personally aware and involved as director of the National Security Agency in the Kaspersky Lab issue,” NSA head Mike Rogers said.

    Kaspersky was founded in Moscow in 1997 by Eugene Kaspersky, a computer engineer who served in the Russian military.

    The company quickly expanded to a global presence, with 3,600 employees, 400 million users of its software, and revenue of some $620 million in 2015, according to its website.

    Its antivirus programs regularly rank in the top five of such software for personal and business computers.

    But US officials have expressed doubts over its recruitment of some staff with alleged links to Russian defence and intelligence bodies.

    Some worry it might offer Russian intelligence a secret back door into users’ computers. US officials are particularly worried that foreign hackers could penetrate US infrastructure via suspect software and malware.

    However, Kaspersky denied having ties with any government.

    “The company has never helped, nor will help, any government in the world with its cyber espionage efforts,” it said in a statement Thursday.

    “Kaspersky Lab believes it is completely unacceptable that the company is being unjustly accused without any hard evidence to back up these false allegations.”

    Commenting on Reddit Thursday, Eugene Kaspersky also said his company had no links to the Russian government, offering to testify in the Senate.

    “I respectfully disagree with their opinion, and I’m very sorry these gentlemen can’t use the best software on the market because of political reasons,” he said, referring to the intelligence chiefs.

    The allegations against Kaspersky come amid heightened US concerns over Russian hacking after what intelligence chiefs say was a significant effort directed by Russian President Vladimir Putin to interfere with last year’s election.

    President Donald Trump’s former national security advisor Michael Flynn is under investigation for his links to Russia, which include being paid $11,250 to speak at a Kaspersky function.

    But Sean Kanuck, a former CIA officer who was the first US national intelligence officer for cyber issues, said the worries about Kaspersky have mainly come from US lawmakers who don’t understand that American companies that compete with Kaspersky are also paid by businesses and US government agencies to have “front-door” access to their systems.

    “That means that any Congressional questions about ‘back doors’ in Kaspersky products reflect a certain naivete, because many of Kaspersky’s clients are intentionally paying for full-content monitoring on their networks.”

     

     

    AFP

  • Renault shut several French factories after WannaCry ransomware cyberattack

    Renault shut several French factories after WannaCry ransomware cyberattack

    As the massive WannaCry ransomware attack spread to over 100 countries, French automaker, Renault has halted production in several of its factories on Saturday, according to the firm’s spokesperson.

    Speaking to Automotive News, the spokesperson confirmed that the company shut down production in its Sandouville factory, saying that “proactive measures have been put in place, including the temporarily suspension of industrial activity at some sites,” but declined to provide a full list of affected sites.

    Renault’s partner company Nissan was also affected: a UK spokesperson confirmed that files at its Sunderland factory were impacted on Friday night, but wouldn’t confirm reports that production was halted.

    A Renault spokesperson told Reuters that the company expects that “nearly all plants” will reopen on Monday.

    The WannaCry ransomware attack began on Friday, impacting computers at UK hospitals, utilities in Spain, and Russia’s interior ministry.

    The attack uses an exploit known as EternalBlue, which is thought to have been developed by the NSA to break through security on Windows computers.

    Yesterday, Microsoft took the unusual step of issuing a Windows XP patch to help prevent the attack, while a 22-year-old cybersecurity researcher seems to have defused the attack by registering a single web address.