DOJ announces US stops Russian malware.

US DOJ Disrupts Russian Malware Network

The United States Department of Justice (DOJ) has announced a major victory in the fight against cyberespionage. Through a court-approved counterespionage action, the DOJ has disrupted a network of malware that Russia’s Federal Security Service (FSB) has been using for almost 20 years to spy on and steal sensitive information from governments and individuals in at least 50 countries, including the United States and other nations in the North Atlantic Treaty Organization (NATO).

Operation MEDUSA

The code name for the U.S. government operation is Operation MEDUSA. The DOJ used a cybertool called “PERSEUS,” developed by the FBI, which essentially commanded the Russian malware “Snake” to disable itself by overwriting its own critical and essential components. U.S. Magistrate Judge Cheryl L. Pollak of the Eastern District of New York signed off on the search warrant, which allowed the Biden administration to domestically launch Operation MEDUSA and employ PERSEUS to counterattack the Russian malware.

Attorney General Merrick Garland Speaks Out

“The Justice Department, together with our international partners, has dismantled a global network of malware-infected computers that the Russian government has used for nearly two decades to conduct cyberespionage, including against our NATO allies,” said U.S. Attorney General Merrick Garland. “We will continue to strengthen our collective defenses against the Russian regime’s destabilizing efforts to undermine the security of the United States and our allies.”

Michael J. Driscoll, assistant director in charge of the FBI’s New York field office, added: “The operation we announced today successfully disrupted the foremost cyberespionage tool of the Russian government. For two decades, the malware allowed Russian Intelligence to compromise computer systems and steal sensitive information—harming not only the United States Government and our allies but also private sector organizations.”

Russian Cyberaggression

Cyberespionage and attacks are a fundamental tool of the Russian government. It uses them to steal intelligence from and attack public and private computers and networks, deny service and access to information, damage electronic infrastructure, disrupt state alliances, spread disinformation, and stifle and subdue political and social activity. Russia partners with cybercriminals and cybergangs to conduct cyberaggression. Russian propaganda outlets encourage cyberattacks against entities they deem as enemies of Russia. In its invasion of Ukraine, Russia has deployed extensive cyberattacks but with limited success.

• US DOJ disrupts Russian malware network
• Operation MEDUSA uses cybertool PERSEUS to counterattack Russian malware
• Attorney General Merrick Garland speaks out against Russian cyberespionage
• Russian cyberaggression is a fundamental tool of the government

*As an Amazon Associate I earn from qualifying purchases