'Vulkan files' leak reveals #Putin's global and domestic #cyberwarfare tactics

✅ Thousands of pages of secret documents leaked by whistleblower angry over #Ukraine war

✅ Private #Moscow consultancy, #NTCVulkan, bolstering Russian cyberwarfare

✅ Tools support hacking operations and attacks on #infrastructure

✅ Documents linked to notorious Russian hacking group #Sandworm

✅ Russian program aims to control #internet and spread #disinformation

https://www.theguardian.com/technology/2023/mar/30/vulkan-files-leak-reveals-putins-global-and-domestic-cyberwarfare-tactics

'Vulkan files' leak reveals #Putin's global and domestic #cyberwarfare tactics

✅ Thousands of pages of secret documents leaked by whistleblower angry over #Ukraine war

✅ Private #Moscow consultancy, #NTCVulkan, bolstering Russian cyberwarfare

✅ Tools support hacking operations and attacks on #infrastructure

✅ Documents linked to notorious Russian hacking group #Sandworm

✅ Russian program aims to control #internet and spread #disinformation

https://www.theguardian.com/technology/2023/mar/30/vulkan-files-leak-reveals-putins-global-and-domestic-cyberwarfare-tactics

#VulkanFiles

Eine frühere Angestellte der Moskauer IT-Firma #NTCVulkan arbeitet nach SPIEGEL-Recherchen heute für #Siemens. Nun will das Unternehmen den Fall untersuchen.

90 ehemalige Programmierer der russischen #Hacker-Firma mit Geheimdienst-Kontakten arbeiten inzwischen für westliche Konzerne arbeiten, auch für #Trivago, #Booking und #Amazon Web Services (#AWS).

https://www.spiegel.de/wirtschaft/vulkan-files-enthuellung-siemens-leitet-interne-untersuchung-ein-a-3a5a5a21-074f-4753-88c8-788faa423608

#Russia #Cyberwar #NTCVulkan: "As a part of Mandiant’s research on Russian cyber and information operations (IO) capabilities, Mandiant worked with a collective of media outlets, including Papertrail Media, Der Spiegel, Le Monde, and Washington Post, to analyze several documents belonging to a Russian IT contractor named NTC Vulkan (Russian: НТЦ Вулкан). The documents detail project requirements contracted with the Russian Ministry of Defense, including in at least one instance for GRU Unit 74455, also known as Sandworm Team. These projects include tools, training programs, and a red team platform for exercising various types of offensive cyber operations, including cyber espionage, IO, and operational technology (OT) attacks.

The documents, which are dated between 2016 and 2020, offer a brief snapshot of previous Russian investments and considerations in scaling cyber operations and capability development. However, Mandiant lacks evidence to prove that the capabilities we discuss have been implemented or are feasible.

A note on source authenticity: Mandiant cannot conclusively confirm the authenticity of these documents based on limitations in our current visibility. However, we strongly suspect they are legitimate based on consistencies observed across the documents we reviewed, limited instances where we were able to validate details externally, and an apparent alignment between the capabilities detailed for development in these programs and those that we have previously observed used at high levels by Russian intelligence services."

https://www.mandiant.com/resources/blog/cyber-operations-russian-vulkan

#Russia #Cyberwar #NTCVulkan: "Russian intelligence agencies worked with a Moscow-based defense contractor to strengthen their ability to launch cyberattacks, sow disinformation and surveil sections of the internet, according to thousands of pages of confidential corporate documents.

The documents detail a suite of computer programs and databases that would allow Russia’s intelligence agencies and hacking groups to better find vulnerabilities, coordinate attacks and control online activity. The documents suggest the firm was supporting operations including both social media disinformation and training to remotely disrupt real-world targets, such as sea, air and rail control systems.

An anonymous person provided the documents from the contractor, NTC Vulkan, to a German reporter after expressing outrage about Russia’s attack on Ukraine. The leak, an unusual occurrence for Russia’s secretive military industrial complex, demonstrates another unintended consequence of President Vladimir Putin’s decision to take his country to war."

https://www.washingtonpost.com/national-security/2023/03/30/russian-cyberwarfare-documents-vulkan-files/