Russia used Windows flaw to spy for years: researchers

Hackers based in Russia used a flaw in Microsoft Windows to spy on NATO, European governments and other organizations as far back as 2009, security researchers said Tuesday.

A report by the cybersecurity firm iSight Partners said the flaw dubbed "Sandworm" allowed the cyber spies to gain access to computers using all versions of Windows for PCs and servers during the past five years.

The researchers said Microsoft was notified of the vulnerability and was making a patch available on Tuesday.

The report said the team exploiting this flaw began operating in 2009, and stepped up its efforts in late 2013, as the crisis in Ukraine broke out.

The researchers said the targets included NATO, Ukrainian government organizations, Western European governments, energy and telecom companies in Europe and US academic institutions, but added that "visibility is limited and that there is a potential for broader targeting from this group."

They noted that many of the attacks "have been specific to the Ukrainian conflict with Russia and to broader geopolitical issues related to Russia."

According to a blog post by iSight, it's not clear what data may have been stolen but that the broad range of attacks "virtually guarantees that all of those entities targeted fell victim to some degree."

"We immediately notified targeted entities, our clients across multiple government and private sector domains and began working with Microsoft to track this campaign and develop a patch to the zero-day vulnerability," iSight added.

It noted that NATO was targeted as early as December 2013, and that other attacks hit a Polish energy firm and French telecommunications company.

The cyberspying effort was referred to as Quedach by the security firm F-Secure, which described some elements of the campaign last month "but only captured a small component of the activities" and failed to identify use of the , according to iSight.


Explore further

Microsoft patching perilous hole in IE Web browser

© 2014 AFP

Citation: Russia used Windows flaw to spy for years: researchers (2014, October 14) retrieved 22 July 2019 from https://phys.org/news/2014-10-russia-windows-flaw-spy-years.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.
0 shares

Feedback to editors

User comments

Oct 14, 2014
At least MS isn't just supporting NSA spying efforts...

It is crazy that this can go on for years without anyone noticing. Those being spied on should have there own strong internal security measures to minimise the impact of the holes that we all know are in windows. The targets here are not home users that cannot be expected to have extra layers of security.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more