US and Allies Warn of Russian Cyber Espionage Targeting Nuclear Scientists and Defense Industry

Washington D.C. The United States and its allies have issued a new warning about Russian cyber espionage activities. They stated in the warning that Russian hackers have targeted the email systems of American nuclear scientists, defense industry-related companies, and government employees.

According to private cybersecurity companies and various intelligence agencies, this cyber espionage campaign has been ongoing for about a year. According to email security company Proofpoint, hackers targeted the email servers of American nuclear research centers and defense industry-related organizations.

According to researchers, their particular interest appears to be in nuclear fusion technology. It is speculated that the objective may be to gather information about the progress made by countries other than Russia in this field.

A warning jointly issued by intelligence and security agencies from the United States and more than a dozen allied countries mentions that Russian hackers have started using new methods of cyberattacks tested on Ukraine against NATO member states. According to officials, if more victims are identified, it will be easier to assess how much sensitive information the hackers have obtained.

According to the warning, hackers used a very rare type of software vulnerability (exploit). This does not require the victim to click on any link; the attack can be successful simply by opening an email received in a vulnerable email system. It is said that through this method, hackers can steal victims' emails for up to about three months and the entire email directory of the related organization.

Several laboratories under the U.S. Department of Energy that conduct nuclear energy research are in operation. No immediate reaction has been given regarding this. The U.S. FBI and the National Security Agency (NSA) have also stated that they are unable to provide further comment on the issued warning immediately. The Russian embassy in Washington has also not commented on this matter.

According to the United States and its allies, federal and local governments, law enforcement agencies, and organizations in the defense, education, and energy sectors were targeted by this cyber campaign. Officials from Unit 42 of cybersecurity company Palo Alto Networks have stated that the main objective of Russian hackers is to collect strategic information about the military information, logistics, and policy decisions of Western countries.

The government warning mentions that Russian cyber groups have a growing tendency to first target Ukraine and test their new cyberattack methods there before using them in other countries around the world. Based on previous successful attacks, it is suggested that email systems in Western countries are likely to be targeted by them in the future as well.

British Security Minister Dan Jarvis said that the fact that Russian hackers tested their methods in Ukraine and then targeted NATO member states is extremely concerning. Meanwhile, Thai authorities arrested a suspected Russian member of the cyber group last November. After being extradited to the United States, he was first presented in a Boston court last month.

According to FBI Cyber Division Assistant Director Brett LeDoux, although cyber activity appeared to decrease for some time after Russia launched its full invasion of Ukraine in 2022, Russian cyberattacks targeting the United States have significantly increased again over the past year.