Washington: Hackers who penetrated the State Department and White House computer networks in recent months were "Russian speakers," security researchers said Wednesday.
The hackers have aimed at high-profile targets including US government and commercial networks as well as in Germany, South Korea and Uzbekistan, according to researchers at Kaspersky Lab, a Russian-headquartered security firm.
The malware used, dubbed "CozyDuke," bears similarities to other malicious programs used in recent years and is designed to get around most detection programs.
Kaspersky said CozyDuke's coding is related to similar malware MiniDuke and CosmicDuke.
"We have been monitoring both MiniDuke and CosmicDuke for couple of years. Kaspersky Lab was the first to warn about MiniDuke attacks in 2013, with the oldest known samples for this cyberthreat dating back to 2008," said Kaspersky researcher Kurt Baumgartner.
"CozyDuke is definitely connected to these two campaigns, as well as to the OnionDuke cyberespionage operation. Every one of these threat actors continues to track their targets, and we believe their espionage tools are all created and managed by Russian-speakers."
According to Kaspersky, this group is responsible for the attack on the State Department which allowed hackers to access the White House.
Last year, White House officials acknowledged a computer intrusion but said no classified data was accessed, and did not comment on reports linking the attack to Russian hackers.
Kaspersky said a key element of the attacks was the use of "spearphishing," or emails that appear legitimate but contain attachments that install malware when a recipient clicks on them.
One of the attachments was an amusing "office monkeys" video which appears to be innocent.
"These videos are quickly passed around offices with delight while systems are infected in the background silently," the Kaspersky report said.
The hackers have aimed at high-profile targets including US government and commercial networks as well as in Germany, South Korea and Uzbekistan, according to researchers at Kaspersky Lab, a Russian-headquartered security firm.
The malware used, dubbed "CozyDuke," bears similarities to other malicious programs used in recent years and is designed to get around most detection programs.
"We have been monitoring both MiniDuke and CosmicDuke for couple of years. Kaspersky Lab was the first to warn about MiniDuke attacks in 2013, with the oldest known samples for this cyberthreat dating back to 2008," said Kaspersky researcher Kurt Baumgartner.
Advertisement
According to Kaspersky, this group is responsible for the attack on the State Department which allowed hackers to access the White House.
Advertisement
Kaspersky said a key element of the attacks was the use of "spearphishing," or emails that appear legitimate but contain attachments that install malware when a recipient clicks on them.
Advertisement
"These videos are quickly passed around offices with delight while systems are infected in the background silently," the Kaspersky report said.
Advertisement
COMMENTS
Advertisement
White House Slams Violence Against West Bank Palestinian Settlers By Israel US Approves Sale Of 600 Patriot Missiles To Germany Kamala Harris Campaign Says Targeted By Foreign Hackers Video: Woman Tries To Jump Off Mumbai's Atal Setu, Saved By Driver, Cops Karnataka Chief Minister Siddaramaiah To Be Prosecuted In Land Scam Case Kolkata Rape-Murder Case Updates: Doctors On 24-Hour Nationwide Strike Trump Seeks Hindu-American Leader's Help To Fight Indian-Origin Harris Video: Under Construction For 9 Years, Bihar Bridge Collapses For 3rd Time Raksha Bandhan 2024: A Unique Tradition And Its Genesis Track Latest News Live on NDTV.com and get news updates from India and around the world.