Federal investigation authority, Law enforcement agency

San Francisco, Feb 17 Russian state-sponsored hackers have been targeting US defence contractors for at least two years, and they acquired information on weapons, aircraft design, and combat communications systems over that period of time.According to the Cybersecurity and Infrastructure Agency (CISA), Federal Bureau of Investigation (FBI), and National Security Agency (NSA), the state-sponsored actors have targeted both large and small cleared defence contractors (CDCs) and subcontractors with varying levels of cybersecurity protocols and resources.These CDCs support contracts for the US Department of Defense (DoD) and Intelligence Community, the agencies said in a statement late on Wednesday."Russian state-sponsored cyber actors have targeted US CDCs from at least January 2020, through February 2022. The actors leverage access to CDC networks to obtain sensitive data about US defence and intelligence programmes and capabilities," said the CISA.Compromised entities have included CDCs supporting the US Army, US Air Force, US Navy, US Space Force, and DoD and intelligence programmes.Through these intrusions, the threat actors have acquired unclassified CDC-proprietary and export-controlled information."This theft has granted the actors significant insight into US weapons platforms development and deployment timelines, plans for communications infrastructure, and specific technologies employed by the US government and military," the agencies warned.Although many contract awards and descriptions are publicly accessible, programme developments and internal company communications "remain sensitive".In multiple instances, the threat actors maintained persistent access for at least six months."Although the actors have used a variety of malware to maintain persistence, the FBI, NSA, and CISA have also observed intrusions that did not rely on malware or other persistence mechanisms," said the agencies.In instances when the actors have successfully obtained access, the FBI, NSA, and CISA have noted regular and recurring exfiltration of emails and data.For example, during a compromise in 2021, threat actors exfiltrated hundreds of documents related to the company's products, relationships with other countries, and internal personnel and legal matters, the agencies mentioned.The FBI, NSA, and CISA now urge all CDCs to investigate suspicious activity in their enterprise and cloud environments.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Federal Investigation AuthorityFOLLOW

Federal investigation authority, Latest News

Washington, Aug 12 An armed man who tried to breach a Federal Bureau of Investigation (FBI) field office ... ...

London, July 7 In an unprecedented move, the heads of the US Federal Bureau of Investigation (FBI) and ... ...

London, May 30 Neil Basu, an Indian-origin British police officer, is said to be considering his legal options ... ...

Members of the legal wing of the Federal Bureau of Investigation (FBI) met the Indore Police Commissioner on Friday and thanked them for busting a gang of fraudsters that duped several US citizens. ...

One of the men who was arrested by the US Federal Bureau of Investigation for impersonating federal agents had visas to Pakistan and Iran, according to prosecutor Josh Rothstein. ...

US Federal Bureau of Investigation arrested two men in Washington DC Wednesday for allegedly impersonating Department of Homeland Security agents for more than two years and while taking advantage of the post, the men gave expensive gifts to federal ...

Federal prosecutors are looking to hold the two men accused of impersonating federal agents in Washington D.C. without bail, saying one of them had ties to Pakistani intelligence and had visas from Pakistan and Iran. ...

San Francisco, Feb 17 Russian state-sponsored hackers have been targeting US defence contractors for at least two years, ... ...