Russians are 'likely' perpetrators of US government hack, official report says
Russia was “likely” to have been behind a string of hacks of US federal agencies identified last month, according the office of the US director of national intelligence which said the hackers breached fewer than 10 federal agencies.
The office and the FBI, the National Security Agency, and the Cybersecurity and Infrastructure Security Agency inside the Department of Homeland Security, in a joint statement, said the hackers’ goal appeared to be collecting intelligence, rather than any destructive acts.
The agencies said that the actor, “likely Russian in origin, is responsible for most or all of the recently discovered, ongoing cyber compromises of both government and nongovernmental networks”. The investigation is continuing, they said, and could turn up additional government victims.
It was the first formal statement of attribution by the Trump administration.
Elected officials briefed on the inquiry had previously said Russia was behind the hacking spree, but Donald Trump had muddied the waters by saying it could have been China.
The penetration of departments including defense, state, homeland security, treasury and commerce is already considered the worst known cybercompromise at least since electronic dossiers on most Americans with security clearances were taken from the Office of Personnel Management five years ago.
The security company FireEye, which was itself breached, discovered the new round of attacks, many of which were traced to a tainted software update from SolarWinds, which makes widely used network-management programs.
Other attacks have used resellers of Microsoft cloud services, with email being a main goal of the hackers.