The FBI is investigating a major cyber-espionage campaign targeting US federal agencies, including the Treasury and Commerce departments, believed to be orchestrated by Russian hackers. The attack, described as one of the most sophisticated state-level breaches in years, allowed hackers to monitor internal emails and potentially compromise other government bodies.
The hackers, linked to Russian spy agencies, exploited a software management tool called SolarWinds, widely used by government and businesses. By inserting malicious code into software updates, they gained undetected access to sensitive systems. SolarWinds is used by 300,000 customers, including US military branches, the NSA, and major corporations.
The UK's GCHQ and other security agencies are assessing the impact on British systems. GCHQ head Jeremy Fleming said they were working closely with US counterparts, while the UK's National Cyber Security Centre urged organisations to patch the compromised software urgently.
The US has not formally blamed Russia, but multiple sources point to the hacking group Cozy Bear, linked to the FSB and SVR. Russia denied the allegations, calling them unfounded. The breach poses a significant challenge for the incoming Biden administration, as officials investigate the extent of data theft and potential use of stolen information.
