Beautiful Virgin Islands

Thursday, Feb 22, 2024

Russian hacking team ‘Cold River’ targeted US nuclear scientists

Russian hacking team ‘Cold River’ targeted US nuclear scientists

A Russian hacking team known as “Cold River” targeted three nuclear research laboratories in the United States this past summer, according to internet records reviewed by Reuters and five cybersecurity experts.

Between August and September, as President Vladimir Putin indicated Russia would be willing to use nuclear weapons to defend its territory, Cold River targeted the Brookhaven (BNL), Argonne (ANL) and Lawrence Livermore National Laboratories (LLNL), according to internet records that showed the hackers creating fake login pages for each institution and emailing nuclear scientists in a bid to make them reveal their passwords.

Reuters was unable to determine why the labs were targeted or if any attempted intrusion was successful. A BNL spokesperson declined to comment. LLNL did not respond to a request for comment. An ANL spokesperson referred questions to the US Department of Energy, which declined to comment.

Cold River has escalated its hacking campaign against Kyiv’s allies since the invasion of Ukraine, according to cybersecurity researchers and western government officials. The digital blitz against the US labs occurred as UN experts entered Russian-controlled Ukrainian territory to inspect Europe’s biggest atomic power plant and assess the risk of what both sides said could be a devastating radiation disaster amid heavy shelling nearby.

Cold River, which first appeared on the radar of intelligence professionals after targeting Britain’s foreign office in 2016, has been involved in dozens of other high-profile hacking incidents in recent years, according to interviews with nine cybersecurity firms.

Reuters traced email accounts used in its hacking operations between 2015 and 2020 to an IT worker in the Russian city of Syktyvkar.

“This is one of the most important hacking groups you’ve never heard of,” said Adam Meyer, senior vice president of intelligence at US cybersecurity firm CrowdStrike. “They are involved in directly supporting Kremlin information operations.”

Russia’s Federal Security Service (FSB), the domestic security agency that also conducts espionage campaigns for Moscow, and Russia’s embassy in Washington did not respond to emailed requests for comment.

Western officials say the Russian government is a global leader in hacking and uses cyber-espionage to spy on foreign governments and industries to seek a competitive advantage. However, Moscow has consistently denied that it carries out hacking operations.

Reuters showed its findings to five industry experts who confirmed the involvement of Cold River in the attempted nuclear labs hacks, based on shared digital fingerprints that researchers have historically tied to the group.

The US National Security Agency (NSA) declined to comment on Cold River’s activities. Britain’s Global Communications Headquarters (GCHQ), its NSA equivalent, did not comment. The foreign office declined to comment.


‘Intelligence collection’


In May, Cold River broke into and leaked emails belonging to the former head of Britain’s MI6 spy service. That was just one of several ‘hack and leak’ operations last year by Russia-linked hackers in which confidential communications were made public in Britain, Poland and Latvia, according to cybersecurity experts and Eastern European security officials.

In another recent espionage operation targeting critics of Moscow, Cold River registered domain names designed to imitate at least three European NGOs investigating war crimes, according to French cybersecurity firm SEKOIA.IO.

The NGO-related hacking attempts occurred just before and after the October 18 launch of a report by a UN independent commission of enquiry that found Russian forces were responsible for the “vast majority” of human rights violations in the early weeks of the Ukraine war, which Russia has called a “special military operation.”

In a blog post, SEKOIA.IO said that, based on its targeting of the NGOs, Cold River was seeking to contribute to “Russian intelligence collection about identified war crime-related evidence and/or international justice procedures.” Reuters was unable independently to confirm why Cold River targeted the NGOs.

The Commission for International Justice and Accountability (CIJA), a nonprofit founded by a veteran war crimes investigator, said it had been repeatedly targeted by Russian-backed hackers in the past eight years without success. The other two NGOs, the International Center of Nonviolent Conflict and the Center for Humanitarian Dialogue, did not respond to requests for comment.

Russia’s embassy in Washington did not return a request seeking comment about the attempted hack against CIJA.

Cold River has employed tactics such as tricking people into entering their usernames and passwords on fake websites to gain access to their computer systems, security researchers told Reuters. To do this, Cold River has used a variety of email accounts to register domain names such as “goo-link online” and “online365-office com” which at a glance look similar to legitimate services operated by firms like Google and Microsoft, the security researchers said.


Deep ties to Russia


Cold River made several missteps in recent years that allowed cybersecurity analysts to pinpoint the exact location and identity of one of its members, providing the clearest indication yet of the group’s Russian origin, according to experts from Internet giant Google, British defense contractor BAE, and US intelligence firm Nisos.

Multiple personal email addresses used to set up Cold River missions belong to Andrey Korinets, a 35-year-old IT worker and bodybuilder in Syktyvkar, about 1,600 kilometers (1,000 miles) northeast of Moscow. Usage of these accounts left a trail of digital evidence from different hacks back to Korinets’ online life, including social media accounts and personal websites.

Billy Leonard, a Security Engineer on Google’s Threat Analysis Group who investigates nation state hacking, said Korinets was involved. “Google has tied this individual to the Russian hacking group Cold River and their early operations,” he said.

Vincas Ciziunas, a security researcher at Nisos who also connected Korinets’ email addresses to Cold River activity, said the IT worker appeared to be a “central figure” in the Syktyvkar hacking community, historically. Ciziunas discovered a series of Russian language internet forums, including an eZine, where Korinets had discussed hacking, and shared those posts with Reuters.

Korinets confirmed that he owned the relevant email accounts in an interview with Reuters but he denied any knowledge of Cold River. He said his only experience with hacking came years ago when he was fined by a Russian court over a computer crime committed during a business dispute with a former customer.

Reuters was able separately to confirm Korinets’ links to Cold River by using data compiled through cybersecurity research platforms Constella Intelligence and DomainTools, which help identify the owners of websites: the data showed that Korinets’ email addresses registered numerous websites used in Cold River hacking campaigns between 2015 and 2020.

It is unclear whether Korinets has been involved in hacking operations since 2020. He offered no explanation of why these email addresses were used and did not respond to further phone calls and emailed questions.

Comments

Brad 1 year ago
Al Qaeda 100% Pentagon Run: Michael Springman US Government Gives Terrorists Passport's
The US federal government is now, and has been, using Al Qaeda inside Syria in its years-long effort to overthrow the Syrian government.  So if Al Qaeda does, in fact, carry out another attack here inside the United States, we can thank our own federal government for making it possible.
The US government used the CIA to overthrow Ukraine in 2014 installed (Petro Poroshenko)

Then installed Zelensky a known actor/comedian on record.

The CIA is running this operation against the BRICS system but also to put NATO military bases along Thr Russian border.

For centuries, it has been at the center of a tug-of-war between powers seeking to control its rich lands and access to the Black Sea.
 Western

media will claim it's a people’s revolution, it was in fact a coup d’état scripted and staged by NGO (George Soros ) the U.S. State Department.

They’re linked to the CIA…CIA interests are not America’s interests, they never have been. The CIA has been morally corrupt since the beginning.”

Days after Russia invaded Ukraine in February, Stone condemned the “hysteria of the Western media” and called for a sober analysis of the geopolitical situation from all sides.

Watch: Oliver Stone’s Bombshell Ukraine On Fire 🔥
Brad 1 year ago
A 70-Year War on ‘Propaganda’ Built by the CIA
Udo Ulfkotte says all media controlled by the CIA: A 70-Year War on ‘Propaganda’ Built by the CIA

Western Journalists for Hire: How the CIA Buys News

CIA Buys News” Ulfkotte goes over how the CIA along with German Intelligence (BND) were guilty of bribing journalists to write articles that either spun the truth or were completely fictitious in order to promote a pro-western, pro-NATO bent, and that he was one of those bought journalists.

Ulfkotte finally built up the nerve to publish the book, in response to the erupting crisis in Ukraine stating

Ulfkotte has publicly stated:

I am deeply worried about the Ukrainian crisis and the possible devastating consequences for all of Europe and all of us…I am not at all pro-Russia, but it is clear that many journalists blindly follow and publish whatever the NATO press office provides. And this type of information and reports are completely one-sided”.

“I am ashamed of it. The people I worked for knew from the get-go everything I did. And the truth must come out. It’s not just about FAZ, this is the whole system that’s corrupt all the way.”

Udo Ulfkotte has since passed away. He died January 2017, found dead in his home, it is said by a heart attack. His body was quickly after cremated and thus prevented any possibility of an autopsy occurring.

In another interview Ulfkotte stated:

The articles appeared under my name several times, but they were not my intellectual product. I was once approached by someone from German Intelligence and the CIA, who told me that I should write about Gaddafi and report how he was trying to secretly build a chemical weapons factory in Libya. I had no information on any of this, but they showed me various documents, I just had to put my name on the article. Do you think this can be called journalism? I don’t think so.”

Newsletter

Related Articles

Beautiful Virgin Islands
London's Iconic British Telecom Tower Sold To Become Hotel
I have a dream, MLK inspiring speech
Ukraine Arrests Father-Son Duo In Lockbit Cybercrime Bust
Aretha Franklin, Marvis Staples - Oh Happy Day
US Offers $15 Million For Info On Leaders Of Cybercrime Group Lockbit
BVI Freedom Song
Russia Claims UK Cultural Agency Spied for Ukraine
Billy Preston - You Can't Beat God Giving (Live)
Apple warns against drying iPhones with rice
VIRGIN ISLANDS REGGAE CARIBBEAN RIDDIMZ
Alexei Navalny: UK sanctions Russian prison chiefs after activist's death
Oh Happy Day Edwin Hawkins - Anthony Brown w FBCG Combined Choir
German economy is in 'troubled waters' - ministry
'Stand by Me' performed by Karen Gibson and The Kingdom Choir
In a recent High Court hearing, the U.S. argued that Julian Assange endangered lives by releasing classified information.
National Anthem of the British Virgin Islands - Oh, Beautiful Virgin
New video
Hello Dolly
Tucker Carlson says Boris Johnson wants "a million dollars, in Bitcoin or cash, from Tucker Carlson to talk about Ukraine.
for KING & COUNTRY - Amen (Reborn) [feat. Lecrae & The WRLDFMS Tony Wi
Russia is rebuilding capacity to destabilize European countries, new UK report warns
Bob Marley - Get Up Stand Up
EU Commission wants anti-drone defenses at Brussels HQ
Yes He Can
Von der Leyen’s 2nd-term pitch: More military might, less climate talk
What A Friend We Have In Jesus
Global Law Enforcement Dismantles Lockbit Ransomware Operation
Unforgettable
Prince William Urges End to Gaza Conflict
Touch The Hem Of His Garment
UK court to hear Assange's final appeal against extradition to the US, where he faces charges related to his journalistic work—the publication of a classified video in 2010 that exposed US war crimes against humanity.
The Lord's Prayer
About 50-60% kids either chose to be YouTuber or influencer
THE GOD MOVEMENT...BEAUTIFUL BVI
A viral video of Nationals MP Barnaby Joyce lying on a Canberra footpath is celebrated by his media mates.
Siyahamba
European Countries React to Navalny's Death by Summoning Russian Diplomats
Ray Charles And The Voices Of Jubilaton, Oh, Happy Day
Israel has gone ‘beyond self-defence’ in Gaza, says Labour’s Streeting
Ramblin' Rose
English farmers to be offered ‘largest ever’ grant scheme amid food security concerns
Protoje - Who Knows ft. Chronixx
Cameron government knew Post Office ditched Horizon IT investigation
Pressure - Virgin Islands Nice
EU Calls for Immediate Ceasefire in Gaza Conflict
Phil Wickham - House Of The Lord
EU Vows To Hold Putin "Accountable" After Meeting Alexei Navalny's Wife
My God Is Real (Yes, God Is Real)
EU Launches Probe Into TikTok Over Child Protection Under Digital Content Law
The Lion King Circle of Life by LEBO M. — LIVE at the HAVASI Symphonic
The EU Initiates Naval Mission to Defend Red Sea Trade Routes
Louis Armstrong - When The Saints Go Marching In
EU and UK Announce Joint Effort on Migration
Kanye West Sunday Service - hallelujah, salvation, and glory
Brazil's Lula Likens Gaza Operation to Holocaust, Israel Says "Red Line" Crossed
Jonathan Nelson - I Believe (Island Medley
Ministers Confirm Proposal to Prohibit Mobile Phone Usage in English Schools
From The Virgin Islands Sqad Up
Microsoft-backed OpenAI valued at $80bn after company completes deal
Common, John Legend - Glory
‘Alexei would want to tell Russia not to give up fighting’
Anthony Evans vs. Jesse Campbell - If I Ain't Got You
Rwandan Footballer's Dismissal Sparks Concerns Over UK Asylum Plan
I have a dream, MLK inspiring speech
Whisky Challenges China's Baijiu Market During New Year Celebrations
Aretha Franklin, Marvis Staples - Oh Happy Day
Avdiivka - Symbol Of Ukrainian Resistance Now In Control Of Russian Troops
BVI Freedom Song
Putin Critic Alexei Navalny's "Killers" Refusing To Hand Over Body, Say Allies
Billy Preston - You Can't Beat God Giving (Live)
"Historic Step": Zelensky Signs Security Pact With Germany
VIRGIN ISLANDS REGGAE CARIBBEAN RIDDIMZ
"Historic Step": Zelensky Signs Security Pact With Germany
Oh Happy Day Edwin Hawkins - Anthony Brown w FBCG Combined Choir
20 Tech Giants Sign Effort To Fight AI Election Interference Across Globe
'Stand by Me' performed by Karen Gibson and The Kingdom Choir
Joe Biden Accuses Putin of Causing Navalny's Death
National Anthem of the British Virgin Islands - Oh, Beautiful Virgin
Russian opposition leader Alexey Navalny has died at the Arctic prison colony
Hello Dolly
Tucker Carlson grocery shopping in Russia. This is so interesting.
for KING & COUNTRY - Amen (Reborn) [feat. Lecrae & The WRLDFMS Tony Wi
Julian Assange's Wife Warns of His Death if Extradited to US
Bob Marley - Get Up Stand Up
‘A lot higher than we expected’: Russian arms production worries Europe’s war planners
Yes He Can
Greece Legalizes Same-Sex Marriage and Adoption Rights
What A Friend We Have In Jesus
Hungarian Foreign Minister: Europeans will lose Europe, the Union's policy must change drastically
Unforgettable
In Britain Homeowners are receiving CPO’s (Compulsory Purchase Orders) so their homes can be redistributed to migrants
Touch The Hem Of His Garment
Microsoft says it caught hackers from China, Russia and Iran using its AI tools
The Lord's Prayer
Influencers Exploit X Platform for Profit Amidst Israel-Gaza Conflict
THE GOD MOVEMENT...BEAUTIFUL BVI
Former Dutch PM And Wife Die "Together Hand In Hand" Via Duo Euthanasia
Siyahamba
Media Giant Paramount Global, Which Owns CBS News, To Cut 800 Jobs
Ray Charles And The Voices Of Jubilaton, Oh, Happy Day
×