Potential for Russian cyberattack towards U.S. ‘to not be taken frivolously’

A report suggesting it’s potential that Russia is perhaps eyeing a cyberattack towards U.S. infrastructure, amid tensions between the nations over Ukraine, shouldn’t be ignored by the cybersecurity neighborhood.

At the moment, CNN reported that it had considered a Division of Homeland Safety (DHS) intelligence bulletin on the subject. The bulletin recommended that within the occasion Russia invades Ukraine, a U.S. or NATO response to the invasion may immediate a cyber offensive from Russia towards targets positioned within the U.S.

The assaults may vary “from low-level denials-of-service to harmful assaults concentrating on crucial infrastructure,” in line with the January 23 bulletin, as cited by CNN.

Kevin Breen, director of cyber risk analysis at Immersive Labs, mentioned in an e mail assertion that “the newest DHS intelligence bulletin warning of a possible Russian cyber assault on the U.S. isn’t one thing to be taken frivolously.”

“We’ve seen notable ransomware teams working out of that area, together with REvil and DarkSide, with the technical capacity to compromise giant networks quickly and at nice scale,” Breen mentioned. “It might be unsuitable to imagine that the nation state housing such felony components doesn’t have an identical functionality.”

Excessive threshold for an assault

Nonetheless, the DHS memo recommended that Russia “most likely” maintains a “very excessive” threshold for finishing up a harmful cyberattack towards targets within the U.S., CNN reported.

“[W]e haven’t noticed Moscow instantly make use of these kind of cyber assaults towards US crucial infrastructure—however cyber espionage and potential prepositioning operations previously,” the DHS bulletin mentioned, in line with CNN.

Breen famous that “an assault of great magnitude, together with a deliberate assault on U.S. crucial infrastructure, would virtually actually have wider geopolitical penalties.”

“With this new bulletin, the Division of Homeland Safety is engaged on the idea that to be forewarned is to be forearmed – and preparation is essential,” he mentioned.

The DHS bulletin was distributed to operators of crucial infrastructure within the U.S., in addition to to state and native governments, in line with CNN.

Different ransomware gangs identified to function in Russia embrace Conti, identified for “attacking organizations the place IT outages can have life-threatening penalties: hospitals, 911 dispatch carriers, emergency medical providers, and legislation enforcement companies,” in line with a report final June from Palo Alto Networks’ Unit 42 analysis group.

As an example, a Could 2021 assault by Conti in Eire “prompted the shutdown of the whole data know-how community of the nation’s healthcare system – prompting cancellation of appointments, the shutdown of X-ray methods and delays in COVID testing,” the report mentioned.