Front Companies And Cyber Hacking

Exposed Russian undercover Cyber Cells in Europe identified by GCHQ and NSA

Michal Koudelka, Director of the Czech Security and Information Service (BIS), has revealed his counterespionage section has uncovered a Russian spy network operating in Prague since at least 2017. Whilst he said information on the operation could not be disclosed until approved for publication in its annual report, the activities of the Russian special services were now discontinued. “The network was completely destroyed and decimated,” said Koudelka.

Intelligence sources in the Czech Republic believe the Russian operation, reportedly carried out by undercover FSB agents, involves at least two private computer and software companies.

OILRIG AND TURLA

The endeavour is being linked to a Russian cyber group called Turla (sometimes referred to as Venomous Bear and Waterbug). British cyber counter-intelligence officers recently disclosed the group had essentially hacked into an operational Iranian cyber outfit codenamed OilRig, believed to be part of MOIS (Ministry of Intelligence and Security) and responsible for two earlier cyber operations codenamed Neuron and Nautilus.

The British investigation began in 2017 and uncovered the “piggyback” engagement which targeted a UK academic institution.

According to intelligence sources, the Russians discovered OilRig was investigating possible backdoors into systems of around 35-countries, many in the Middle East. Once compromised, Turla then expanded its search across Europe. Officials said the covert action was “double-edged”, in that Turla was using Iranian tools to both infiltrate systems and then hide behind them. “If a compromise was discovered, users would believe the Iranians were responsible,” a source said. “Iran was oblivious of Turla’s presence.”

The information targeted was held by governments, military bodies, technology, energy and commercial companies.