Massive 7.5TB breach reveals secret Russian IT projects

Hacktivists seize a trove of FSB data after breaching the networks of a major contractor

A computer with data overlaid onto the Russian flag

Hackers breached the server of a major contractor working on behalf of the Russian intelligence service before stealing 7.5TB of sensitive data and sharing this freely with other hackers and journalists.

Attackers infiltrated the company network of SyTech on 13 July, according to BBC Russia, and began a process of copying data while deleting masses of it. Much of this included detailed information about sensitive government IT projects commissioned by the Federal Security Service of the Russian Federation (FSB).

There at least 20 non-public SyTech projects detailed in the trove of documents stolen, stretching back to 2009. These include Nautilus-S, in which Tor traffic is de-anonymised with the help of rogue Tor servers, and Mentor, which involves monitoring and searching emails that sit on servers belonging to Russian organisations.

Nadezhda, meanwhile, is dedicated to creating a programme that accumulates and visualises information about how the Russian portion of the internet is connected to the wider global web.

Following the hack, the homepage of the company's website displayed a comical yoba-face' image which the hackers installed to demonstrate they had breached SyTech's systems. Hacktivists and cyber criminals often leave such images as a calling card following a successful attack on an organisation's networks.

The attackers published screenshots of the stolen data on a Twitter account and shared the multi-TB trove of information with Digital Revolution, a similar group that breached another FSB contractor last year.

This second hacking collective describe themselves as "digital revolutionaries" and have a track record of infiltrating official systems in an effort to undermine the government. After being handed the most recent collection of documents, for example, Digital Revolution shared the entire trove with journalists.

Since activity peaked around a decade ago with organisations like Anonymous, hacktivism has not been as widespread a tool for political and social influence as it once was, in the West particularly.

The Syrian Electronic Army, for example, is among the most prominent groups in recent history and was formed in 2011 as a pro-Assad hacking group that launches cyber attacks against political opposition groups and media organisations.

The Russian state itself has been at the centre of several hacking storms, both as aggravator and victim, with the US, for example, accusing intelligence services of orchestrating hacks against the democratic process.

In May, meanwhile, sensitive data belonging to 2.25 million Russian citizens, including passport information, was found to be exposed online through misconfigured government servers. These included the details of high-ranking government officials.

Featured Resources

Preparing for AI-enabled cyber attacks

MIT technology review insights

Download now

Cloud storage performance analysis

Storage performance and value of the IONOS cloud Compute Engine

Download now

The Forrester Wave: Top security analytics platforms

The 11 providers that matter most and how they stack up

Download now

Harness data to reinvent your organisation

Build a data strategy for the next wave of cloud innovation

Download now

Recommended

Nigerian cyber criminals target Texas unemployment system
cyber security

Nigerian cyber criminals target Texas unemployment system

27 May 2021
Hackers use open source Microsoft dev platform to deliver trojans
Security

Hackers use open source Microsoft dev platform to deliver trojans

14 May 2021

Most Popular

UK gov considers blocking Nvidia's takeover of Arm
Acquisition

UK gov considers blocking Nvidia's takeover of Arm

4 Aug 2021
RMIT to be first Australian university to implement AWS supercomputing facility
high-performance computing (HPC)

RMIT to be first Australian university to implement AWS supercomputing facility

28 Jul 2021
Tesla Megapack goes up in flames at Australian battery site
Hardware

Tesla Megapack goes up in flames at Australian battery site

30 Jul 2021