The US and Great Britain’s special services published a list of recommendations to combat Russian hackers, which, in the opinion of organizations, supports Russia’s foreign intelligence service (CVR). Message about the release of the benefit appeared on the National Security Agency (ANB) website.
The published document lists the tools that are supposedly used by Russian hackers. It is reported that among them – the use of well-known vulnerabilities, as well as the use of an open source tool Silver (it allows access to the compromised network). The document provides a list of used exploit.
According to foreign special services, it is in this way hackers get access to “foreign government, diplomatic, analytical and energy organizations, as well as health organizations.” It is assumed that so specialists from CVR collect unfolded around the world: in the USA, Great Britain, European countries and the former USSR.
The authors also indicate that recently the attackers have changed cyberpading tactics, so all past recommendations became irrelevant. It is assumed that this happened after the publication of previous reports of overseas services.
In the preparation of a document called “More details about tactics, methods and procedures used by CIBER Cyber Actors” participated specialists of the British National Cyber Security Center (NCSC), the Federal Bureau of Investigations (FBI) and Infrastructure and Cyber Security Agencies (CISA) USA.
Foreign employees emphasized the importance of timely update of all programs to eliminate vulnerabilities and the use of two-factor authentication. They also recalled how important it is to teach the staff the basics of cybersecurity: for example, users must immediately report suspicious emails. “Treat people like the first line of defense,” the report says.
April 15, the White House stated that CVR is involved in a large-scale cybershpionage campaign using SolarWinds software. On the same day, US President Joe Biden signed a decree on the introduction of new sanctions against Russia for “destabilizing actions in the international arena.”