FBI found Russian malware used for hacking, corrupt.

DOJ Announces Successful Operation to Disrupt Russian Malware

The Department of Justice has announced the successful completion of an operation aimed at disrupting a sophisticated malware used by Russian operatives for almost two decades. The malware, known as “Snake,” has been used by a unit within Center 16 of the Federal Security Service of the Russian Federation to steal sensitive information from hundreds of computers in at least 50 countries.

Operation MEDUSA

The FBI’s Operation MEDUSA disabled the Snake malware on compromised computers using an FBI-created tool called PERSEUS. This tool issued commands to force the malware to overwrite its own components, effectively disabling it.

Notorious Hacking Group

The FSB spies behind the malware are part of a notorious hacking group known as “Turla.”

“The Justice Department, together with our international partners, has dismantled a global network of malware-infected computers that the Russian government has used for nearly two decades to conduct cyber-espionage, including against our NATO allies,” said Attorney General Merrick Garland. “We will continue to strengthen our collective defenses against the Russian regime’s destabilizing efforts to undermine the security of the United States and our allies.”

Neutralizing Malware

The US has been investigating Snake and related malware tools for almost 20 years, but Turla has gone to great lengths to upgrade, revise, and selectively deploy their malware, which often remains on a compromised device indefinitely and undetected. The Justice Department will use every weapon in its arsenal to combat Russia’s malicious cyber activity, including neutralizing malware through high-tech operations, making innovative use of legal authorities, and working with international allies and private sector partners to amplify their collective impact.

Monitoring Snake’s Exfiltration of Data

The FBI and the intelligence community worked with foreign allies to monitor Snake’s exfiltration of data from compromised devices by routing the transmission of these stolen data through unwitting Snake-compromised computers in the United States.

It’s time to take a stand against malicious cyber activity. Let’s work together to protect our collective security.