Needless to say, this is an incredibly precarious moment and the U.S. will need to be very careful about calibrating any cyberattacks to avoid catastrophic reprisals. Putin has given apocalyptic warnings about what he'll do if the West tries to stop him.
.@emilyhorne46 slaps down NBC's story about Biden being presented with aggressive cyber retaliation options.
"This report is wildly off base and does not reflect what is actually being discussed in any shape or form." (via @magmill95)
Sign of how seriously the White House is pushing back against this NBC story: Jen Psaki not only retweeted me tweeting out the denial but also tweeted it herself. They don't do that for just any story.
The major pushback to the NBC story suggests that the White House is *very* worried about Russia misinterpreting the story, assuming that Biden has approved or will approve major cyberattacks, and preemptively escalating against us.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
Symantec's Eric Chien tells me: "We are seeing the wiper across multiple organizations in different sectors in the Ukraine including finance and government organizations. The wiper uses a legitimate driver to gain low level hard disk access to wipe data."
Centralizing data in Kyiv robbed Russia of easy access to files and services previously accessible from now-occupied computers in Crimea, Luhansk, and Donetsk. It also prevented those now-untrustworthy computers from becoming backdoors into Ukrainian networks.
Ukraine's locally distributed computer system was the product of historically slow internet speeds that prevented large, frequent data transfers. But the country's modernization meant it could move everything to web platforms based in Kyiv (with multiple backup sites).
White House briefing starting now. Anne Neuberger, deputy national security adviser for cyber, is one of the speakers.
Neuberger: “While there are currently no specific or credible cyber threats to the homeland, the U.S. government has been preparing for potential geopolitical contingencies since before Thanksgiving.”
Essentially confirming recent WaPo story, Neuberger says USG "believes that Russian cyber actors likely have targeted the Ukrainian government, including military and critical infrastructure networks, to collect intelligence & preposition to conduct disruptive cyber activities."
During panel at Munich Cybersecurity Conference, FBI Cyber Division's Tonya Ugoretz says "international standardization" of AML rules for cryptocurrency "would greatly help" stop ransomware. Many countries don't have consistent rules, so even well-meaning exchanges can't help.
Ugoretz: "Sometimes foreign exchanges want to be cooperative...but because they don't have that existing framework that provides consistency in the types of information that they're collecting about their customers, they may not even have the information on hand to provide..."
On ransomware, DHS Under Secretary for Policy Rob Silvers says “we are taking this problem on from all angles, and it's among our very highest cybersecurity priorities.” He notes stopransomware.gov, various alerts and guidance docs, and partnerships with other agencies.