Russia's Intelligence FSB Contractor Hacked, 7.5TB Data Stolen

A hacker going with the online alias 0v1ru$, had hacked SyTech, a contractor for FSB, Russia's national intelligence service, and expose all the interal projects of company which includes one called deanonymizing Tor traffic.

The breached took place last weekend on July 13, where hackers breached Active Directory server of SyTech and gained access to the company's entire IT network, including a JIRA instance.
After accessing  the network they stole 7.5TB of data and also defaced the company's website.

Shared Data With Another FSB Hacker
Hacker shared all (may be) stolen data with another FSB hacker - Digital Revolution. They shared several sceeenshots of company server with some important and confidential documents.
The documents revealed all the interal projects of company on which they had worked since 2009.
Some if them are - 
  • Nautilus - A Project for collecting data about social media users (such as Facebook, MySpace, and LinkedIn).
  • Nautilus-S - A Project for deanonymizing Tor traffic with the help of rogue Tor servers.
  • Reward - A Project to covertly penetrate P2P networks, like the one used for torrents.
  • Mentor - A Project to monitor and search email communications on the servers of Russian companies.
  • Nadezhda - A Project dedicated to creating a program that accumulates and visualizes information about how the Russian segment of the Internet is connected to the global network
  • Hope - A Project to investigate the topology of the Russian internet and how it connects to other countries' network.
  • Tax-3 - A Project for the creation of a closed intranet to store the information of highly-sensitive state figures, judges, and local administration officials, separate from the rest of the state's IT networks.
On twitter Digital Revolution also reveals that FSB was also tracking students and pensioners.

BBC Russia reported (who received bunch of stolen documents) there were many other older project also. As some projects looks like they were for research purpose but couple of them were different, as seems it was tested on real world.

One is Nautilus-S, specially for deanonymizing Tor traffic, which was started in 2012.
Second is Hope, the one which analyzed the structure and make-up of the Russian segment of the internet.
Digital Revolution hackers claim that they gave information to journalists in the form in which it was provided by members of $ 0v1ru (how many of them are unknown).

Source : Zdnet, BBC Russia 

Related Posts

Post a Comment

Subscribe Our Newsletter