Russia Appears to Carry Out Hack Through System Used by U.S. Aid Agency
American officials have often been reluctant to respond to cyberaggression in kind, in part because the countryâs own defenses are so inadequate. âUntil we are confident in our own ability to deflect Russian cyberattacks, our actions will continue to be driven by concerns over what Putin will do,â said Kiersten Todt, the managing director of the Cyber Readiness Institute.
But both government officials and some experts argued that the hijacking of emails by the S.V.R. was such bread-and-butter stuff in the modern world of constant cyberconflict that it did not mark an escalation from SolarWinds. âItâs not obvious to me that this type of attack is over the red line,â said Robert Chesney, the director of the Strauss Center at the University of Texas at Austin.
In this case, Microsoft reported, the goal of the hackers was not to go after the aid agency itself. Instead, its motivation appeared to be to use emails purporting to be from the U.S. government to get inside groups that have revealed Russian disinformation campaigns, anti-corruption groups and those who have protested the poisoning, conviction and jailing of Russiaâs best-known opposition leader, Alexei A. Navalny.
According to SecureWorks, an Atlanta cybersecurity firm tracking the attacks, the Russian hackers targeted the Atlantic Council and E.U. Disinfo Lab, which have both exposed several Russian disinformation campaigns.
Other targets included the Organization for Security and Cooperation in Europe, which has drawn Mr. Putinâs ire for criticizing the fairness of elections in Belarus and Ukraine; the Ukrainian Anti-Corruption Action Center, and Irelandâs Department of Foreign Affairs, according to SecureWorks.
Mr. Putin had previously described the Organization for Security and Cooperation in Europe as a âvile instrument of the West.â The fact that Russia took aim at these targets, not federal networks as it did with SolarWinds, suggested sanctions may have diverted Russia elsewhere.
âThis may be Russia, and Putin specifically, saying, âThanks for the sanctions â now weâre going to use Americaâs open and vulnerable networks for our own political purposes and vendettas,ââ Ms. Todt said.