Massive 7.5TB breach reveals secret Russian IT projects

Hacktivists seize a trove of FSB data after breaching the networks of a major contractor

A computer with data overlaid onto the Russian flag

Hackers breached the server of a major contractor working on behalf of the Russian intelligence service before stealing 7.5TB of sensitive data and sharing this freely with other hackers and journalists.

Attackers infiltrated the company network of SyTech on 13 July, according to BBC Russia, and began a process of copying data while deleting masses of it. Much of this included detailed information about sensitive government IT projects commissioned by the Federal Security Service of the Russian Federation (FSB).

Advertisement - Article continues below

There at least 20 non-public SyTech projects detailed in the trove of documents stolen, stretching back to 2009. These include Nautilus-S, in which Tor traffic is de-anonymised with the help of rogue Tor servers, and Mentor, which involves monitoring and searching emails that sit on servers belonging to Russian organisations.

Nadezhda, meanwhile, is dedicated to creating a programme that accumulates and visualises information about how the Russian portion of the internet is connected to the wider global web.

Following the hack, the homepage of the company's website displayed a comical yoba-face' image which the hackers installed to demonstrate they had breached SyTech's systems. Hacktivists and cyber criminals often leave such images as a calling card following a successful attack on an organisation's networks.

Advertisement
Advertisement - Article continues below

The attackers published screenshots of the stolen data on a Twitter account and shared the multi-TB trove of information with Digital Revolution, a similar group that breached another FSB contractor last year.

Advertisement - Article continues below

This second hacking collective describe themselves as "digital revolutionaries" and have a track record of infiltrating official systems in an effort to undermine the government. After being handed the most recent collection of documents, for example, Digital Revolution shared the entire trove with journalists.

Since activity peaked around a decade ago with organisations like Anonymous, hacktivism has not been as widespread a tool for political and social influence as it once was, in the West particularly.

The Syrian Electronic Army, for example, is among the most prominent groups in recent history and was formed in 2011 as a pro-Assad hacking group that launches cyber attacks against political opposition groups and media organisations.

The Russian state itself has been at the centre of several hacking storms, both as aggravator and victim, with the US, for example, accusing intelligence services of orchestrating hacks against the democratic process.

In May, meanwhile, sensitive data belonging to 2.25 million Russian citizens, including passport information, was found to be exposed online through misconfigured government servers. These included the details of high-ranking government officials.

Advertisement

Recommended

Visit/security/cyber-security/355210/cyber-criminals-torn-over-how-to-adapt-to-post-coronavirus-threat
cyber security

Hackers torn over how to adapt their tactics to the coronavirus pandemic

3 Apr 2020
Visit/security/cyber-security/355185/165-million-britons-experienced-a-cyber-crime-in-the-past-year
cyber security

Report: 16.5 million Britons fell victim to cyber crime in the past year

1 Apr 2020
Visit/cloud/amazon-web-services-aws/355183/aws-launches-amazon-detective
Amazon Web Services (AWS)

AWS launches Amazon Detective for investigating security incidents

1 Apr 2020
Visit/security/privacy/355182/government-to-launch-coronavirus-contact-tracking-app
privacy

UK government to launch coronavirus 'contact tracking' app

1 Apr 2020

Most Popular

Visit/security/cyber-security/355200/spacex-bans-the-use-of-zoom
cyber security

Elon Musk's SpaceX bans Zoom over security fears

2 Apr 2020
Visit/development/application-programming-interface-api/355192/apple-buys-dark-sky-weather-app-and-leaves
application programming interface (API)

Apple buys Dark Sky weather app and leaves Android users in the cold

1 Apr 2020
Visit/data-insights/data-management/355170/oracle-cloud-courses-are-free-during-coronavirus-lockdown
data management

Oracle cloud courses are free during coronavirus lockdown

31 Mar 2020