Cyberwarfare looms as Russia shells, invades Ukraine
- Reference: 1645744813
- News link: https://www.theregister.co.uk/2022/02/24/cyberwarfare_russia_ukraine/
- Source link:
Conflict latest
→ Ukrainian President Volodymyr Zelensky says more than 135 Ukrainian soldiers and civilians were killed on Thursday after Russia launched [1]a full-on invasion of the nation from the north, east, and south.
→ The UN says roughly 100,000 people have already fled their homes in the country as missiles rained down on the capital Kyiv and other cities.
→ Russian forces have taken control of the defunct Chernobyl reactor site, and reportedly attacked at least Ukraine's port city of Mariupol and Boryspil airport.
After Ukraine's computers were attacked, Russia will put Western systems and platforms in its sights to influence citizens and extract intelligence as deeper sanctions are imposed by the US, UK, and the European Union, it is feared.
"We expect to see probably beyond just Ukraine, disinformation to target Western audiences and cyberespionage against key NATO members, as Russia tries to understand the next moves when it comes to sanctions or other steps that Western governments will play," Luke McNamara, principal analyst at cybersecurity consulting firm Mandiant, told The Register .
The United States on Thursday issued fresh sanctions targeting Russia’s banking and financial sectors, and also implemented "unprecedented export control measures” to cut “off more than half of Russia’s high-tech imports,” the White House [2]said .
This round of sanctions, in response to Thursday's conflict, will restrict Russia's access to vital technology, hurt its industrial base, and undercut “Russia’s strategic ambitions to exert influence on the world stage,” the White House said.
[3]
The administration said it will place Russia-wide restrictions on "semiconductors, telecommunication, encryption security, lasers, sensors, navigation, avionics and maritime technologies." US President Joe Biden earlier indicated he was [4]willing to cut off chip supplies to Vladimir Putin's nation.
[5]
[6]
The US Dept of Commerce has more details on the sanctions [7]here and [8]a summary here .
Over in the UK, Prime Minister Boris Johnson [9]said major Russian banks will be excluded from Britain's financial system and oligarchs will face fresh sanctions as a result of the invasion.
Military malware
The US and UK governments this week warned
[10]PDF
of Russia-linked malware called Cyclops Blink, which can infect network equipment to exfiltrate data and attack downstream devices in key targets. This software nasty appears to be a replacement for Kremlin espionage-ware dubbed VPNFilter, which for one thing could [11]detect the presence of industrial SCADA equipment."While there are not any specific, credible, cyber threats to the US, we encourage all organizations – regardless of size – to take steps now to improve their cybersecurity and safeguard their critical assets," a US Department of Homeland Security spokesperson told The Register .
[12]
Uncle Sam also today issued an [13]advisory describing Iranian government-sponsored actors, known as MuddyWater, "conducting cyber espionage and other malicious cyber operations targeting a range of government and private-sector organizations across sectors in Asia, Africa, Europe, and North America."
"We have seen government warnings about Western banks being targets, in retaliation for sanctions on major Russian banks, but at this point, one certainly couldn't rule out a broader range of targets," Emily Kilcrease, senior fellow and director for energy, economics and security program at the Center for New American Security, told The Register .
[14]Ukraine's IT sector looks to business continuity plans as Russia invades
[15]'Hundreds of computers' in Ukraine hit with wiper malware as conflict continues
[16]US imposes sanctions as Russia invades Ukraine
[17]Russia 'stole US defense data' from IT systems
Credit-ratings agency S&P Global Ratings issued a heightened alert for possible network-based assaults on key institutions and infrastructure.
"Cyberattacks are becoming a more prevalent means of achieving foreign policy objectives, given their lower deployment costs relative to conventional military tactics and uncertain scope for retaliation," the S&P Ratings research note, which was shared with The Register , stated.
Cyberattacks are becoming a more prevalent means of achieving foreign policy objectives
S&P gave the example of [18]NotPetya , which in 2017 hit Ukraine and ultimately disrupted 7,000 companies across 65 countries globally, with estimated economic losses of around $10bn. The US Department of Justice in 2020 charged six Russian intelligence officers with distributing NotPetya, among other things.
"We believe that the economic impact from such an attack for entities could be more severe now, given increased interconnectedness and digitalization," said S&P credit analyst Zahabia Gupta, in the research note.
Computers in Ukraine this week were [19]hit by Windows malware that wipes out data, and the country’s government and banking websites have been whacked offline over the past few weeks.
[20]
Netblocks, which tracks internet disruptions, [21]reported network connectivity problems in Kharkiv, which has been taken over by Russian forces. The Kremlin's website is offline for at least us here in America. Russia's military website mil.ru is returning the [22]joke HTTP 418 error for those connecting from outside the nation.
An eye for an eye turns the whole world blind
President Biden has been presented with retaliatory cyber-assault options, NBC News [23]reported . The White House [24]disputed the report.
"It's going to be a bit of an escalation cycle, unfortunately," Kilcrease said.
Mandiant’s McNamara is keeping a close watch on the activities of Russia-linked cyber-spy gang Temp.Isotope, which also been referred to as Berserk Bear, or Energetic Bear. This crew is [25]known for abusing Microsoft's SMB protocol to infiltrate energy and industrial sectors.
As a sanction, the West could block Russia from the SWIFT banking communications system, and that in turn could spark online attacks on the finance sector in response. “To disconnect Russia from SWIFT, that would certainly be a pretty significant step,” McNamara said. "Historically we've seen when you have a state adversary that has a capability and is disconnected from SWIFT, what they're willing to do. We've seen that in the case of North Korea."
Companies should bulk up their security posture by putting themselves in the shoes of the adversary, McNamara said. He gave the example of Colonial Pipeline, which was [26]ransacked by a Russian ransomware group Darkside and had to shut down its oil pipelines amid gas shortages. That is to say, one should predict the kind of public-facing chaos and disruption an attacker might wish to create, and then take steps to prevent or mitigate that scenario.
"Even just some sort of panic and people running to the pump for gas, that's something I think you have to think about how the adversary might approach this," McNamara said.
Mandiant in 2013 [27]outed China's military as having siphoned hundreds of terabytes of data from computers from US corporations.
Secrets deleted
Some customers have asked Akamai for help with network security related to the situation in Ukraine. The inquiries focus mainly on the mitigation of malicious traffic, and using geoblocking to comply with new regulations and sanctions, a company spokesperson told The Register .
Akamai is working on mechanisms to help customers block such traffic, especially from breakaway Ukrainian regions occupied earlier this week by Russia. "As of this publication, Akamai only has tools to apply such regional blocking for Crimea, but is working to expand capabilities quickly to encompass the Donetsk and Luhansk regions," the spokesperson said.
Meanwhile, Cloudflare has [28]removed all "customer cryptographic material from servers in Ukraine" as a precaution, according to CEO Matthew Prince. Presumably this is so that secret keys don't end up falling into the hands of hostile forces.
It may be that the preference for disruptive or destructive attacks is something more akin to wiper malware
Distributed denial-of-service attacks have been felt in Ukraine in recent days, and whether they'll work on Western targets is an open question, Mandiant’s McNamara said. DDoS floods on Western financial institutions in 2012 in response to US sanctions against Iran’s financial system was successful as it disrupted bank operations. Russia may launch some DDoS attacks, though defenses against these kinds of assaults have got a lot better since a decade ago.
"So it may be that the preference for disruptive or destructive attacks is something more akin to wiper malware," McNamara said.
Kaspersky Lab, which is based in Moscow, declined to provide specifics on how it was serving customers amid the sanctions and worsening situation between Russia and the West.
The infosec biz remains focused on delivering its security expertise, and will continue to protect businesses, critical infrastructure, governments, and netizens around the globe, it told The Register in an email.
"Kaspersky’s business operations remain stable. The company guarantees the fulfillment of its obligations to partners and customers – including product delivery and support and financial transaction continuity. The global management team is monitoring the situation carefully and is ready to act very quickly if needed," it said. ®
Get our [29]Tech Resources
[1] https://www.cbsnews.com/live-updates/russia-ukraine-invasion-donbas-troops-today/
[2] https://www.whitehouse.gov/briefing-room/statements-releases/2022/02/24/fact-sheet-joined-by-allies-and-partners-the-united-states-imposes-devastating-costs-on-russia/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Yhlfn4xn4giRntiIAZThBAAAAJc&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2022/02/23/us_sanctions_russia/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yhlfn4xn4giRntiIAZThBAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yhlfn4xn4giRntiIAZThBAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.commerce.gov/news/press-releases/2022/02/commerce-implements-sweeping-restrictions-exports-russia-response
[8] https://www.commerce.gov/news/fact-sheets/2022/02/us-department-commerce-bureau-industry-and-security-russia-rule-fact-sheet
[9] https://www.bbc.com/news/uk-60515626
[10] https://media.defense.gov/2022/Feb/23/2002943421/-1/-1/0/CSA_NEW_SANDWORM_MALWARE_CYCLOPS_BLINK_REPLACES_VPNFILTER_20220223.PDF
[11] https://ics-cert.kaspersky.com/publications/news/2018/05/28/vpnfilter/
[12] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Yhlfn4xn4giRntiIAZThBAAAAJc&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[13] https://www.cisa.gov/uscert/ncas/current-activity/2022/02/24/iranian-government-sponsored-muddywater-actors-conducting
[14] https://www.theregister.com/2022/02/24/ukrainian_it_companies_look_to/
[15] https://www.theregister.com/2022/02/23/ukraine_wiper_malware/
[16] https://www.theregister.com/2022/02/23/us_sanctions_russia/
[17] https://www.theregister.com/2022/02/17/cisa_russian_attacks/
[18] https://www.theregister.com/2017/06/28/petya_notpetya_ransomware/
[19] https://www.theregister.com/2022/02/23/ukraine_wiper_malware/
[20] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Yhlfn4xn4giRntiIAZThBAAAAJc&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[21] https://twitter.com/netblocks/status/1496832598764834824?cxt=HHwWkMDSma3U6MUpAAAA
[22] https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/418
[23] https://www.nbcnews.com/politics/national-security/biden-presented-options-massive-cyberattacks-russia-rcna17558
[24] https://www.reuters.com/world/europe/biden-presented-with-options-cyberattacks-against-russia-nbc-news-2022-02-24/
[25] https://ics-cert.kaspersky.com/publications/reports/2018/04/23/energetic-bear-crouching-yeti-attacks-on-servers/
[26] https://www.theregister.com/2021/05/10/colonial_pipeline_ransomware/
[27] https://www.theregister.com/2013/02/19/china_apt_report_mandiant/
[28] https://twitter.com/eastdakota/status/1496744714992635905
[29] https://whitepapers.theregister.com/
Re: Just disconnect them
"Just block all traffic coming from Russia. This will also block 99% of cyberattacks originating from them."
No, it really won't. The Russian government has this ability to pay for servers in other countries and to take over equipment on residential networks in other countries. They have and they will. They launch attacks from those devices, which are controlled by non-Russian servers. If you could block all the network traffic coming from Russia, they'd have some disruption as they put some operators elsewhere and sent instructions internationally, but if even one cable remains, they can proxy around your blocks to control their zombies. Since they have lots of connections, including through countries that aren't part of NATO and that have taken their side if only unofficially, you can't get a 100% block implemented.
Re: Just disconnect them
"servers in other countries"
You still need a VPN to reach those servers, so if all IP packets leaving Russia were black-holed (a small matter of BGP4 config) they could no longer do that.
Re: Just disconnect them
I commented on that in the comment to which you replied. I pointed out that, if you could block literally every packet, you could cause them a temporary problem but that they would find an alternative (E.G. put some people in a different country and relay instructions through a different connection such as phone, satellite, etc. I also pointed out that you can't drop every packet because there are numerous countries you don't have on board. They have cables that go through central Asian countries such as Kazakhstan. They can quite easily pretend to be Kazakh traffic unless you can get Kazakhstan to join you (they won't, they're allied with Russia) or are willing to ban them as well. If you do ban Kazakhstan, they have many other countries to use.
Re: Just disconnect them
"I commented on that in the comment to which you replied. I pointed out that, if you could block literally every packet, you could cause them a temporary problem but that they would find an alternative (E.G. put some people in a different country and relay instructions through a different connection such as phone, satellite, etc."
And your (invalid) point has been already addressed in the original comment, which explained, that even though the block couldn't be perfect, because Russia could circumvent it by phone or satellite, but it would still heavily restrict their bandwidth available to carry out and control such attacks, which in turn would severely hamper their abilities to do so. More importantly: it would make Russian people turn against their own government, because they would now be also paying the price directly and in many many way for Putin's ruthless actions.
Re: Just disconnect them
I'm afraid that it really wasn't. The original comment implied that you could cut off all the attacks by blocking Russian traffic. What you could do is dramatically decrease the bandwidth available to the Russian public, but since the Russian government has priority access to whatever links still exist, some of which they own, they would still be able to run all the criminal operations they want. So you can't, in fact, prevent them from hacking into stuff even if you could cut off their internet, and once again, it isn't feasible to cut off their internet because there are several countries that wouldn't be on board.
Re: Just disconnect them
@FF22
Fine......until you start to wonder about the threats that already OVER HERE (think SolarWinds and similar).
Nice try!
Re: Just disconnect them
It won't work, because Russia cyber army will use proxy countries. Pakistan is becoming close of Russia. China didn't condemn the invasion, as didn't many Asian countries. Count also all the corrupt administrations around the World Russia could hire.
Re: Just disconnect them
We need to keep comms routes to Russia open, if only to provide support to the Putin's opposition and vaguely do what can be done to feed real information in.
Modems were instrumental in co-ordinating the efforts in 1989/90 to oust the old regime.
And so it will be today, revolution by internet, if there is to be any justice.
NATO countries are justifiably scared of committing boots on the ground, or even aircraft to a No-fly zone. Ukraine has explicitly avoided asking for power projection beyond it's own capability, yet. When they do call, will we answer?
To everyone who thinks putting their private, proprietary, mission-critical, confidential, irreplacable, and otherwise "we're up a s-creek if we lose any of this" information on the secure as a fishing-net or rain-cloud internet, this article should be required reading. And Exhibit A in any litigation against the entities who get their the info stolen.
SWIFT see SPFS
Russia did it's own version of SWIFT in 2014 SPFS, .... you can see they've been planning this a long time. Kicking them off SWIFT would be painful though, they'd be forced to deal with China to turn Rubles into hard currency, and China would extract a large middle-man-margin for that. There aren't many players in SPFS, with China being the only significant one other than Russia. Russia would be poor. Russians would be very poor. They already get a tiny portion of the wealth, with Putin's friendly oligarchs taking the biggest share of that resource wealth.
Imagine a democratic Russia, with *real* elections with *real* votes being counted, and no more Putin, no more fake elections, no more "98% votes for Putin with 95% turnout" in districts reporting at the last minute, to fix elections he hasn't rigged enough.
Russia could have a normal place in the world, no more of those crappy decaying tower blocks. No more doctors thrown from building by Putin's thugs for daring to expose his mishandling of Covid, no more journalists murdered on the street by Putin's men for reporting about his palaces and yachts, no more politicians arrested and imprisoned for standing up to Putin. They could be free from Putin.
Perhaps they could even join the EU, have freedom of movement in the world, have a proper economy, proper housing, a proper life. Ordinary people having a good life on the back of their oil wealth.
There's a prize here for Russians, they could get rid of dictator Putin and Belarus could eject his side kick Luschenko, and have a better life. Look at the collapse of the military Junta in Argentina. They could join Ukraine in the fight against Putin, and Putin's dictatorship would collapse and they would be free. They could be rid of Putin.
Russians and Ukrainians united together against Putin.
Are you listening St Petersburg troll factory workers? Your life would be better without Putin, so maybe just phone it in? Are you listening Russian soldiers, why die for Putin, when he won't even let you have a free vote?
Re: SWIFT see SPFS
Perhaps they could even join the EU, have freedom of movement in the world, have a proper economy, proper housing, a proper life. Ordinary people having a good life on the back of their oil wealth. ...... Anonymous Coward
That makes one one wonder why UKGBNI left the EU to deliver and end up with none of those benefits, AC, for one cannot deny unless delusional, despite all the pompous nonsense spouted from Parliamentary dispatch boxes, things are nowhere near as good and comfortable as they used to be, ie they are significantly worse than they have ever been in living memory and getting worse with each passing day and 0day.
Re: SWIFT see SPFS
Russians and Ukrainians united together against Putin
Russians and Ukrainians don't have the short memory time-span of a gold-fish: they remember very well that Biden is personally responsible for the Maidan coup-d'état in 2013, that his son was paid millions on Ukrainian money, that he openly bragged about interfering into the Ukrainian judicial system to remove a prosecutor who investigated about corruption into that very company where his very son was paid millions for nothing. They probably also remember very well Victoria " Fuck the EU " Nuland who is now in Biden's foreign affairs ...
Re: SWIFT see SPFS
I am pretty sure Ukrainians remember Trump calling Putin a genius one not long ago.
Re: SWIFT see SPFS
Whilst that is all possible, for a long time since the collapse of the old Eastern Bloc countries, life for the average Russian has not actually improved (that much).
Although there were queues and so on, there was not the same poverty and overt corruption. The way that criminals and the very rich have been able to syphon off money is beyond belief. That they have been able to do that has been made very easy by Western countries (of which the UK appears to be quite near the top) that persistently turned a blind eye to all this incoming money.
What Putin's goal is we don't really know. What we do know is that sanctions rarely work and take time to have an effect. Also I don't thing that those at the top in Russia give much of a stuff about sanctions. Unless China joins that approach they will be able to get quite a bit of the stuff they need from there. Again this is more of a long-term issue.
What is abundantly clear is that direct military intervention by any form of coalition is not practical. Tackling Russian is a long way from running around "liberating" Kuwait and moving into Iraq. Whilst Iraq will have had Russian equipment at the time they did not have the training and resources to maintain & use it. Crucially they did not have a stockpile of nuclear weapons and whatever chemical/biological stuff that is hidden in compounds.
The West (at the moment Europe/UK/US) has to do what it can but nothing is going to dissuade Putin overnight. Germany in particular is going to have major issues with Energy shortly, I suppose the US and maybe Qatar could ship LNG around.
Re: SWIFT see SPFS
Putin and his cronies chose to shore up a failing system, reduce Russia's debt obligations, sacrificed all hope of growth for stability, from that he doesn't have to go cap in hand to anyone for help when wants to enact one of his mental ideas like we've seen in the last week. Putin is pissing himself laughing at all the hand wringing and speeches from the west. Ukraine not in NATO? Great let's grab it and watch the US and EU shit their pants as we get their borders and wonder how far I'll go.
Nothing new in any of this, since time imemorial it's more about what you say you can/will do over what you actually do. Kicking the arse of some small country just for show, then he has the choice to relent and show the glorious benevolence dictators love to show every so often for the cameras and PR. He has every intention of tying strings to Ukraine's leaders and making them dance for him whenever he fancies proving a point in future. Psychotic, socipathic but then how else do you get to run one of the largest most corrupt countries on earth for 20 years!
Russia may not win this cyber war
We know that Russia has a formidable cyber army, but it's not the only one. There will be revenge and not only [1]from private actors
[1] https://www.zataz.com/wp-content/uploads/anonymous-RT.jpg
Re: Russia may not win this cyber war
Is this what you are referring to, Potemkine! ...... [1]https://www.rt.com/russia/550548-anonymous-cyber-war-russia/ ?
[Your provided link isn’t functioning]
[1] https://www.rt.com/russia/550548-anonymous-cyber-war-russia/
Re: Russia may not win this cyber war
The problem with waging a cyber war against Russia is that Putin doesn't care. If he cared about his own people's prosperity, he wouldn't have annexed Crimea on a whim (the Russian economy hasn't really grown since), he would have reduced the theft of the oligarchs so there was more money going round the Russian economy, he certainly wouldn't have invaded Ukraine just now.
But Putin's attitude is that our heroic Russian people can take more pain than you weak Western democracies. And of course that's fine, because he personally won't be joining them in suffering that pain, nor will the people around him. And as the Soviets found, even when you've got demonstrably less, you can still bribe enough people to support the regime by giving them a bit more than everybody else gets. After all, why else did Putin join the KGB in the 1970s, when nobody could have had any illusions how evil an organisation it was. If you'd willingly join the KGB in the 70s, you'd have joined the SS in 1940.
Putin is also right of course, becuase he doesn't have to worry about elections.
So the question is, what does Putin want? And how can we threaten or take that away from him, or at least use it as bargaining chips? I doubt he cares about money. So long as he rules Russia, he'll have enough money. As soon as he stops ruling Russia, he risks being poor, dead or put on trial. He also seems to genuinely care about Russia being militarily powerful. And possibly more importantly NATO not being. So I'd say that we need to reinforce NATO's Russian border anyway, due to the increased security threat now he's got troops in Belarus and Ukraine. So we should do so, noisily and expensively.
So the goal of sanctions should be to damage the Russian economy sufficiently that it can't support a threatening military. While building up our own capabilities. And see if we can also tempt him into spending lots of cash to counter our military tech, in hopes of damaging the economy further. All while offering de-escalation and disarmament in return for Russia doing similar and being less of a military threat - such that hopefully they can have an economy to support a large military at such time as they don't want to threaten us with one. I guess this is going to be a long and painful process with hopefully lots of diplomacy, but with resolution behind it. And the credible ablity to use force if there's no other option. So sadly another Cold War. But this time Russia has a vastly smaller economy and no fig leaf of ideology on its side.
All very depressing. But I think it's pretty clear that the current leadership of Russia and China have both decided that accomodation of their reasonable desires by the West is weakness, leading to them making more-and-more unreasonable demands. And if we don't want to live in that world, we're going to have to do something about it.
Re: Russia may not win this cyber war
Putin and his cronies have billions of dollars' worth of assets held in Western countries. UK, EU, USA...
Those governments should make it their priority to identify all that money, and simply trouser it. No "freezing", just grab the lot. It'd be a welcome cash boost for them, and it would hit Putin's henchmen where it hurts - force them to fall back on assets within Russia, thereby making them share in the economic pain of the country.
Re: Russia may not win this cyber war
Yep, seize the lot to fund the inevitable energy bills and stockpile some ammuntion & basic equipment that is looking increasingly likely to be needed.
Re: Russia may not win this cyber war
I’ve been saying this and included Superyachts, football clubs in those assets too.
Re: Russia may not win this cyber war
It would be nice if those ransomware gangs that aren’t Russian stooges or agree with Putin did something with their ‘talent’. Maybe also lose the decryption key in the process.for good measure.
Re: Russia may not win this cyber war
Bang on! Couldn't agree more.
Putin reminds me of every bullying manager we've all had at one time or another. They come up with mental ideas, you want to keep your job you shut up and do what your asked or they'll make it very unconformtable. The kicker is, when it's all great they gift you a little controlled praise, when shit hits the fan and one of their ideas fails they instantly turn on you with the classic, "I asked you do X and you f**ked it up! What the hell do we do now? I'm not carrying the can for this! You were told to do it, you did it wrong and I'm going to make sure everyone knows it was you.".
Putin doesn't care about anyone but Putin, he's lost in a dreamy fantasy that his beloved KGB will rise again from the ashes as he's taking Russia back to the glory days he loves so much where those in government did and said whatever the hell they liked. You disagree? Hope you said goodbye to your family this morning 'cos if you live past the end of this day it'll be a long time until you see them again!
SWIFT kick
Kicking Russian banks off of SWIFT would be a major step, because the NSA is using SWIFT to track the flow of money. They probably don't want to blind themselves like that.
Isn't WhatsApp running on Ukrainian servers?
Re: SWIFT kick
I think they should initiate a 1 month ban on Russian finance companies using SWIFT starting 1st March. Doesn't have to be permanent, just enough to kick them where it hurts.
Problem is that Western leaders have never really dealt with anything like this before, The world, rightly so, is now so globalised and inter-dependent that no one ever thought a complete nutter would try to damage it but they didn't bank on human nature. Always some nutter ready to ruin everyone's fun and he's sitting in Moscow laughing is arse off at how ineffective the western leaders are right now.
The Register.
I realise that in the multiverse of news organisations, The Register, has its place, not, maybe with the same heft as, say, The New York Times, The Guardian, Die Welt or Le Monde, (or even 'What's on in Stoke Newington'*), but I hope that your defences are up to protecting your services from whatever gets thrown at them for reporting the current invasion of Ukraine as honestly as you can.
*(According to Alexi Sayle, an A4 sheet of paper with "F*ck All" written across it.)
"We expect to see probably beyond just Ukraine, disinformation to target Western audiences..."
Expect as in: I expect to see a crashed car. After crashing a car. I'm "slightly astonished" by the load of people around here -mainland western Europe- who happily and closely follow Putin's narrative.
Shutdown their Cloud accounts
How many Russian companies use Amazon, Google or Microsoft cloud services? Could the US sanction to get Russian based accounts shutdown? It may only be temporary until they reconfigure and redirect through other countries, but it would be an uncomfortable, if short term, pain point. It may come about anyway if SWIFT gets shutdown and they can't cough up their fees on time.
Re: Shutdown their Cloud accounts
Interesting, let us assume that the Russian government but more likely businesses is making use of cloud services from Microsoft, Amazon and so on.
Would denying access to those accounts or services (not deleting) be possible and achievable?
The first is definitely yes, the second is difficult. Amazon and Microsoft have partnered with third parties to deliver services in Russia so the accountability and legalities become difficult.
If (and bluntly this will be the US) an administration decides to block accounts of Russian customers then it starts to get very difficult where the assets you are denying access to are not actually held on non-Russian equipment.
Again, there is no easy answer and everything has to be looked at however the Russian are perfectly capable of cutting undersea cables and that will cause far more damage to everyone else than themselves for very low risk. So is tackling Russian cloud assets possible? very definitely yes, is the expected outcome assured? not really.
Re: Shutdown their Cloud accounts
It would work. None of the big three have big datacenters in Russia. They do operate CDN endpoints and some edge stuff there, but not the big regions because nobody outside Russia wants their data there and most companies inside Russia don't either. Whether that would do much to weaken Putin is another question, but it can be achieved technologically.
Re: Shutdown their Cloud accounts
Also this would lead to a few multi billionaires losing a bit of income, those living in the US, I mean, so it will not be done however easy it is.
Why...
Do the Russians need cyber warfare? Can't they just ask all the politcians in The West who now reside happily in the pockets of the Oligarchs?
I [1]understand that a large chunk of Tory money (and, rumour has it, Republican money, across the pond) has it's origin in the East of Europe... Are they actually likely to approve biting the hand that feeds them?
[1] https://twitter.com/i/status/1496220637370765313
Just shut Russia down...
It might take a while for Russia (and its friends) to bypass any computer/data based information system blocks...
But in the meantime, by cutting them off from SWIFT or any other Western based credit sources, limiting data flowing in/out from Russian servers and preventing any financial transactions taking place, will perhaps make some in power in Russia question exactly what Putin is doing...and could possibly lead to a "coup d'etat" by more moderate individuals.
And certainly the wave of public opposition to the war has already been seen in various Russian cities...so, that just needs to be nurtured by turning the screw hard against Russia.
And in the meantime, if any James Bonds/Jonathan Hemlocks/Boba Fetts/Leons/John Wicks can be parachuted into Moscow and perform a "sanction" then maybe this could end quite quickly.
(posted as anon, obviously !!)
I disagree with the rationale here
I'm going to respectfully disagree with the government line on this one. If anything, we're going to see fewer, or NO cyberattacks originating from Russia against NATO countries.
I'm a former US Marine from way back in the Cold War era. I was originally trained to fight against Soviet bloc tactics. As such, I can say one thing here. They're NOT using them.
Hear me out. Putin is most certainly not stupid. You do not get to be the head of the KGB if you are. So let's look at what's going on here. There are quite a few factors so far that show Russia is being VERY careful with its military tactics during this invasion. Russian troops are being exceedingly careful to minimize casualties against civilians and civilian infrastructure. They are using what precision capabilities they have, to their fullest. Mass artillery barrages and carpet bombing have always been a major component of Eastern Bloc tactics. They have been totally absent so far. They're minimizing damage to everything but legitimate military targets as best they can.
Why? Because Putin knows that if the news starts putting up pictures of mass casualties amongst the civilian populace, that may push the West into actual military support. Something he DOES NOT WANT. Putin's already said that Russia has been weathering sanctions for years. They're annoying, but the Russians are used to them by now. What they do not want is western military intervention. So Russian is doing everything they can to not provoke such a measure. Dedicated cyberattacks from Russia, against Western powers at this time, would certainly be seen as attacks against the State, and most likely would provoke a full military response over it. He's not going to do that and give up the advantages that they currently have.
We may see the usually cyber attacks from China, North Korea, and the various criminal organizations as normal. I'm betting though that activity from actual Russian government sanctioned organizations are going to be nil, until this thing is over.
Re: I disagree with the rationale here
MarineTech,
I can't see NATO making any military response in defence of Ukraine. Had we allowed them to join, things would have been different. And Russia would have known upfront that they were attacking a country covered by a nuclear umbrella. But we didn't, so they aren't.
Since Russia has invaded Ukraine, and is seemingly bent on capturing large parts (maybe all) of the country - if we get involved at this stage we're risking war which could go horribly wrong and/or horribly nuclear.
Also Russia has been mobilising for 4 months for this. More if you count the mini-surge of forces to Ukraine's borders in April last year. So we couldn't put serious boots on the ground in a timely manner - we deliberately haven't forward based major NATO facilites in Eastern Europe, as part of the NATO Russia founding act from the 90s. Something I hope we'll now scrap, telling the Russians that if they want to be a threat, we'll defend. Obviously we could do some serious damage to the Russians with air support, but I doubt we could get the numbers of aircraft deployed in time to overwhelm the Russians, so we'd have to take large risks and accept losses. Plus how would Russia react to our aircraft from bases in the UK, Romania, Poland, Germany etc destroying their tank columns? At the least there'd be missile (and maybe special forces) attacks on some of our air bases. Maybe lobbing a few tactical nukes around, given they've only limited numbers of cruise missiles, and you need a lot of cruise missiles to take out a large airbase. Especially if they're not that accurate. The risks are too high.
What makes the nuclear threat work is not just us promising to protect the Baltic States. But us having troops there. So for the Russians to conquer the place, they've got to kill lots of our troops. That means NATO has skin in the game, a reason to reinforce or counter-attack - and maybe a reason for defensive tactical nukes. And then the full horrors of MAD. Of course modern NATO doctrine doesn't really involve massive nuclear strikes on Soviet tank formations in the Fulda Gap, so I don't quite know how we expect the nuclear dimension to work. Presumably the strategic nuclear shield is there to defend NATO from Russian tactical nuclear strikes, and superior airpower is there to break up the tank formations for the outnumbered ground troops. Given how little space there is to trade for time in the Baltic States, and how small our garrisons are, I think we're going to have to do some serious thinking about this in the next few months. I'm not sure small tripwire forces is enough anymore.
Re: I disagree with the rationale here
Only Putin wants this war. Even his Chief of Intelligence was humiliated on public television when he had to confirm to the invasion. Another impact will be Finland and Sweden applying for Nato membership.
Re: I disagree with the rationale here
"There are quite a few factors so far that show Russia is being VERY careful with its military tactics during this invasion. Russian troops are being exceedingly careful to minimize casualties against civilians and civilian infrastructure. "
Sorry but the Russian military are not being that precise...there are pictures of civilian blocks of apartments burnt out/destroyed in the last day...and one BBC journalist was seen visibly upset as video of her now destroyed home, was shown on TV.
https://www.bbc.co.uk/news/av/world-europe-60525815
There are other photo's on other civilian buildings in other towns also damaged by Russian attacks.
Re: I disagree with the rationale here
As I noted previously, they are being precise, up to the level of their technology. Yes, there is collateral damage to areas around Russia's designated "military targets", but very little when compared to other actions of theirs in the past. Look at pictures from Ossetia during the Russo-Georgian War back in 08, or from Chechnya back in 92. Whole neighborhoods were flattened compared to what we're seeing now.
Russia's precision munition capabilities aren't up to many systems in the west. What they have though, they're using to good effect.
I keep seeing video of Russia artillery columns moving through the countryside. They contain quite a few BM-21 rocket launchers and conventional tube artillery. Those are not precise weapons and are used for saturation bombardment of targets. They haven't been used on urban centers yet.
Like I said. The Russians are showing uncharacteristic restraint.
may be coincidence
but I’m getting a lot less spam from the spam-cannon this week…
Just disconnect them
Just block all traffic coming from Russia. This will also block 99% of cyberattacks originating from them. Obviously there will be ways for them to get around this, but with the bandwidth available to them restricted to possibly 1/1.000.000th of what they had originally, will also mean that their capabilities to attack will also be dramatically decreased.