This @NYT article discusses how Russia is utilizing an array of technological tools to compromise the online privacy of its citizens. These efforts include #whatsapp, #signal, and other western communications technologies. While these efforts focus upon Russian citizens, the effects will spill over into everyone's use. After all, when the Russia started the Ukraine attack in Crimea, the Russian cyberattacks led to billions of dollars of ransomware losses due to the NotPetya malware. So, why will these cyber attacks spill over into worldwide businesses? First, the mere act of breaking the security of an application weakens security for everyone else. Second, FSB rarely confines their exploits to spycraft. Their hackers are often criminal hackers who were captured and impressed into intelligence work by the FSB. These hybrid intelligence/criminal hackers are then permitted to utilize their intelligence tools to engage in a certain amount of standard criminality. For this reason, the exploits discussed will inevitably be either used by hybrid FSB hackers or licensed out as hacking as a service (#HAAS) to third parties. Third, war is often a hotbed of innovation. Innovations seen on the Russian and Ukraine cyber battlefields will eventually make it out into the wild simply because innovation cannot be completely suppressed. No matter the path, we will all soon see these exploits weaponized against non-Russian criminal victims soon. To combat this, privacy and security teams have to make sure that they are watching not just the criminal hacking frontiers but also the edges of geo-political conflicts such as the Ukraine war. Smart #cybersecurityprofessionals must also expand their interests to include international politics and national security.
| 1 minute read
The Ukraine War is Already Affecting the Ability of Companies to Protect their Customers' Privacy
To aid an internal crackdown, Russian authorities had amassed an arsenal of technologies to track the online lives of citizens. After it invaded Ukraine, its demand grew for more surveillance tools. That helped stoke a cottage industry of tech contractors, which built products that have become a powerful — and novel — means of digital surveillance. The technologies have given the police and Russia’s Federal Security Service, better known as the F.S.B., access to a buffet of snooping capabilities focused on the day-to-day use of phones and websites. The tools offer ways to track certain kinds of activity on encrypted apps like WhatsApp and Signal, monitor the locations of phones, identify anonymous social media users and break into people’s accounts, according to documents from Russian surveillance providers obtained by The New York Times . . . .