NEW: Pres. Biden on Colonial Pipeline ransomware, as service is restored, says the US will be pursing efforts to disrupt the hackers. "We do not believe the Russian govt was involved," he clarifies, adding USG has "strong reason" to believe the criminals are living in Russia.
Pres. Biden clarifies he is not ruling out retaliatory cyberattacks to shut down the DarkSide / Colonial Pipeline ransomware criminals.
Pres. Biden says one of the things he expects to talk about with Russian President Vladimir Putin includes international standards for countries that knowingly allow criminals, like DarkSide in this ransomware incident, to operate from their countries.
If you're following along here, here are more details on the U.S. government's plans to disrupt the hackers behind the Colonial Pipeline ransomware, on @CyberScoopNews: cyberscoop.com/pipeline-ranso…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Deputy Assistant Secretary of Defense for Cyber Policy @MiekeEoyang mentions Colonial Pipeline ransomware incident in testimony on Capitol Hill just now, noting "the cyber domain is both more important & contested than in recent memory." cyberscoop.com/pipeline-ranso…
Many countries allow their gov hackers to moonlight as cybercriminals, which @MiekeEoyang notes "is not how responsible states behave...Nor do responsible states condone shielding this criminal behavior." Just yesterday Pres. Biden said he wanted to talk to Putin about this.
If you're following along w/ cyber DASD @MiekeEoyang & @CYBERCOM_DIRNSA Nakasone testimony today, you'll note they mentioned Cyber Flag, an exercise Cybercom & allies conduct to prep for attacks. In 2020 they simulated an attack against a European airbase cyberscoop.com/cyber-flag-cyb…
New: The US govt is planning to go after the hackers who last week hit Colonial Pipeline w/ ransomware. Just now, Pres. Biden declined to rule out a cyberattack against DarkSide hackers, which Biden says are believed to be in Russia. On @CyberScoopNewscyberscoop.com/pipeline-ranso…
Biden clarified the U.S. does not believe the Russian government was behind the attack, but said he wants to talk with President Putin about governments that knowingly allow criminal hackers, like those working with DarkSide, to conduct ransomware ops from within their countries
Note: Biden did not specifically say whether the U.S. government would be targeting DarkSide, the criminal syndicate that distributes ransomware to criminal partners, or the affiliate hackers that used DarkSide ransomware to target Colonial Pipeline.
Americans at the pump are already starting to feel the cascading effects of the ransomware incident affecting Colonial Pipeline, analysts say, but Energy Secretary Jennifer Granholm is pleading w/ Americans to resist the urge to hoard gas. @CyberScoopNewscyberscoop.com/gas-panic-buyi…
“We want to encourage people: it’s not that we have a gasoline shortage, it’s that we have this supply crunch, and that things will be back to normal soon," says Energy Secretary Jennifer Granholm.
Some gas stations in affected states are already running out of fuel, according to @GasBuddy. As of Wednesday morning, per @GasBuddyGuy:
-15.4% of stations in Georgia out of gas
-24.8% of stations in North Carolina out
-15.0% of stations in Virginia dry too
NEW: The FBI warns in a new alert issued today that the FBI assesses malicious actors will be using deepfakes to advance their foreign influence & cyber-operations in the coming weeks, & that they already use them in influence ops. Details @CyberScoopNewscyberscoop.com/fbi-foreign-ac…
The FBI alert notes: “Foreign actors are currently using synthetic content in their influence campaigns & the FBI anticipates it will be increasingly used by foreign & criminal cyber actors for spearphishing & social engineering in an evolution of cyber operational tradecraft."
Some examples FBI points out: A pro-Chinese gov influence op @Graphika_NYC tracks as “Spamouflage Dragon,” has used profile images generated with AI to lend authenticity to the campaign, via @jeffstone500: cyberscoop.com/graphika-spamo…
After a long, hard year in 2020, excited to learn today the @CyberScoopNews team has been selected as a finalist for 7 Azbee awards — including for website of the year, as well as for several investigative, analytical/technical & breaking news stories. asbpe.org/news/2021/03/1…
To follow along with our coverage, here are the highlights, brought to you by Azbee: my look into the U.S. military issuing an alert that a little-known, Chinese-linked hacking group is behind some suspicious activity aimed at U.S. defense contractors: cyberscoop.com/dcsa-cybersecu…
.@jeffstone500's interview with TikTok's security chief, Roland Cloutier, who says he still doesn’t understand why the U.S. government has labeled TikTok as a national security threat: cyberscoop.com/tiktok-lawsuit…
A former Army Green Beret has been arrested for allegedly working w/ Russian intelligence and sharing info about his chemical and Special Forces units w/ the GRU, including team members so GRU could assess their interest in recruiting them, too, per DOJ. justice.gov/opa/press-rele…
The allegations against this man, Peter Rafael Dzibinski Debbins, span decades: December 1996 to January 2011 he allegedly conspired with Russian intelligence, per DOJ.
He filled out his SF-86 form in 2008 for his security clearance, did not mention his Russian contacts, and received top secret/sci clearance in 2010, per court documents.