Skip to content

What are the Russian hackers searching for this time?

People in this story

Photo by Matthew Modoono/Northeastern University
Scenes at the Colosseum which is operated by the Institute for the Wireless Internet of Things (W-IoT) at Northeastern University, and housed at the Northeastern Innovation Campus in Burlington, Massachusetts on Nov. 11, 2020.

The depth of the latest Russian hack into the e-mail systems of the Treasury Department, State Department, and other U.S. government agencies is stunning, but the strategy of manipulating a third party to infiltrate computer networks is not, according to Engin Kirda, a professor of computer science at Northeastern who studies computer security.

“It highlights the problem of I.T. outsourcing and also relying on other people’s software to manage your networks,” says Kirda, who holds joint appointments in Northeastern’s Khoury College of Computer Sciences and College of Engineering. “Outsourcing and having professional management software is great, but then your security also depends on their security. If they fail, the implications of this failure might affect thousands of organizations.”

The hackers are believed to have injected malicious code earlier this year into the software updates of SolarWinds, a Texas company that helps manage computer networks for virtually all of the Fortune 500 companies and a wide variety of government clients—including Los Alamos National Laboratory, a designer of U.S. nuclear weapons.

The coordinated attack, which appears to have been waged on a number of fronts, was far more sophisticated than the typical spear-phishing campaigns that trick users into accessing links that appear to be authentic.

Though 18,000 users unwittingly downloaded the updates with the embedded Russian code, the hacks focused mainly on “the highest-value targets,” according to FireEye, a private cybersecurity firm that discovered the attacks. (FireEye itself was targeted and compromised as well.) The precise goals of the hackers, who are thought to represent the Russian intelligence agency S.V.R., remain unknown.

Continue reading at News@Northeastern.

More Stories

image of woman gathering possessions to take before a homeless encampment was cleaned up in San Francisco on Aug. 29, 2023

Are bans on homeless encampments, sleeping outside ‘cruel and unusual’? Policy experts discuss Supreme Court case

image of dirty brown water coming out of silver, slightly rusted faucet

Northeastern research identifies inequities in exposure to PFAS in New Jersey drinking water.

graphic of plastic forks aligned at an angle in front of light blue background

Will the US ban the use of single-use plastics like England, India, Hong Kong and other countries?

All Stories