Exclusive-U.S. warned firms about Russia’s Kaspersky software day after invasion -sources -Breaking
[ad_1]
© Reuters. FILE PHOTO – People stand next to Russian Kaspersky at the GSMA 2022 Mobile World Congress, (MWC), Barcelona, Spain. March 2, 2022. REUTERS/ Albert Gea/File photoChristopher Bing
(Reuters] – A senior U.S. official said that the government had warned some American companies privately the day Russia invaded Ukraine. They believed Moscow could use software created by Kaspersky, a Russian cybersecurity firm. Two people with knowledge of the matter also claimed to have been aware.
Washington has a broader strategy for preparing critical infrastructure suppliers such as telecoms, water and energy to deal with potential Russian intrusions.
Last week, President Joe Biden stated that Russia’s February 24th attack on Ukraine had triggered sanctions. The White House didn’t offer any details.
The senior U.S. official referred to Kaspersky’s software as saying that “the risk calculation has changed with respect to the Ukraine conflict.” It has increased.”
Kaspersky is one of the most well-known anti-virus makers in cybersecurity. Its headquarters are located in Moscow. The company was established by Eugene Kaspersky (a former Russian intelligence officer).
A Kaspersky spokeswoman said in a statement that the briefings about purported risks of Kaspersky software would be “further damaging” to Kaspersky’s reputation “without giving the company the opportunity to respond directly to such concerns” and that it “is not appropriate or just.”
According to the senior U.S. official, Kaspersky’s Russia-based employees could be forced into remote access by Russian intelligence or law enforcement agencies.
Kaspersky is a US-based company that lists partnerships with Microsoft, Intel, and other companies. IBM On its website: (NYSE:). Microsoft did not respond to requests for comment. Both IBM and Intel did not reply to our requests for comment.
The Federal Communications Commission included Kaspersky on March 25 to their list of communication equipment and service provider deemed to be threats to U.S. security.
This isn’t the first time Washington said that Kaspersky might be affected by the Kremlin.
Kaspersky was removed from the government’s systems for several months by Trump, and many companies were warned to stop using it in 2017.
A series of cybersecurity briefings were held by the U.S. Security agencies in response to Trump’s ban. According to one person who is familiar with this matter, the contents of the briefings held four years prior were comparable to today’s.
Kaspersky denied any wrongdoing over the years and has never been involved in any secret partnerships with Russian intelligence.
Uncertain if a particular incident or piece new intelligence was the reason for security briefings. A senior official refused to discuss classified information.
No U.S. intelligence agency or any other allied intelligence agency have ever provided direct evidence of Kaspersky’s backdoor to the public.
Kaspersky established a number of transparency centers in response to Trump’s decision. These are places where partners can examine its code and check for any malicious activity. The goal of the blog was to establish trust and build customer confidence after U.S. charges.
The U.S. official stated that the transparency centers were not “even one fig leaf”, as they don’t address concerns raised by the U.S. government.
“Software engineers in Moscow handle the [software]They said that updates are the source of risk. They can also send malign commands via the updaters, and this comes from Russia.
Experts in cybersecurity say anti-virus software is a complex program that works on all computers. This makes it difficult to detect malware. Antivirus software can be used to spy on others.
Kaspersky products may also be available under white-label sales agreements. Information technology contractors can package the software and change its name in commercial contracts, which makes their origin hard to pinpoint.
The cybersecurity centre of Britain on Tuesday advised that organisations providing critical infrastructure or services in Ukraine should consider the potential risk from Russian computer technology entering their supply chains.
In a blog posting, the National Cyber Security Centre claimed that there is no evidence to suggest the Russian government intends to destroy UK commercial products or services. However, the lack of evidence does not prove absence.
[ad_2]
