Cybersecurity News
Filters
Filtered by tag: russia × Clear
Hackers Hid Vasilek Backdoor in VMware Tools During 2-Year Russian Healthcare Intrusion
Matched: health
A Belarus-aligned hacker group called Partisan Zmiy spent nearly two years inside a Russian healthcare organization's network, concealing a backdoor called Vasilek within VMware Tools. Documented by Russian cybersecurity firm Solar, the group has been active since at least 2020 and has a history of targeting industrial and government entities in Russia.
U.K. Sanctions Cryptomus for RU Money Laundering
Matched: Australia, cryptocurrency
The U.K. sanctioned Cryptomus, a cryptocurrency platform accused of processing payments for ransomware, drug markets, cybercrime, and helping Russia evade financial restrictions. The sanctions freeze U.K.-held assets and bar British firms from doing business with it. Also targeted were VexPay, TokenSpot, and Tsunami Payments. Cryptomus, which has operated under multiple names including Certa Payments and now Heleket, processed over $7 billion since 2022. Analysts say sanctions are more effective than Canada's earlier $176 million fine, which proved unenforceable.
OpenAI says it took down a malicious Russian plan to spread misinformation on ChatGPT
OpenAI disrupted a Russian-linked influence campaign that used ChatGPT accounts to promote a fake academic think tank called the International Burke Institute. The site stole and misattributed real academic work to appear legitimate and featured a "Burke Sovereignty Index" designed to make Russia look superior to Western nations. Operators took steps to hide Russian origins, but linguistic slip-ups revealed them. Overall reach was limited, though the campaign's infrastructure was notably sophisticated.
OpenAI Bans Russia-Linked ChatGPT Accounts Used in Covert Influence Campaign
Matched: Australia
OpenAI removed ChatGPT accounts tied to a Russian covert influence operation promoting the International Burke Institute, a fake Israeli expert community. Operators used VPNs to bypass Russia's access ban, prompting ChatGPT in Russian while requesting English output without detectable linguistic traces. Content spread across X, LinkedIn, Facebook, Substack, and Telegram. Of 36 IBI articles, 34 were plagiarized and misattributed. A "sovereignty index" framed Western nations negatively while favoring Russia. Individual Telegram channels reached 10,000–20,000 followers.
Russian websites could soon be easy pickings for hackers as security certificates expire — banks, emails, and government systems all potentially at risk
Russia faces a cybersecurity crisis as SSL certificates for major websites, including banks, email services, and government systems, expire following Western sanctions that cut off access to foreign certificate authorities. Russia's proposed fix involves installing a state-controlled root certificate, but this would grant authorities the ability to intercept encrypted traffic, raising serious surveillance concerns. Many browsers don't trust the Russian alternative.