The Justice Department and Microsoft have announced the seizure of over 100 web domains allegedly used by a Russian intelligence agency to target current and former US officials, civil-society groups, and Russians in the US. The hacking campaign aimed to gather intelligence on US and allied efforts to support Ukraine and undermine pro-democracy and human rights organizations in the US, UK, and Eastern Europe.
This move is part of the Justice Department's efforts to expose covert Russian operations targeting US democracy ahead of the 2024 presidential election. The hackers focused on infiltrating media outlets, think tanks, and non-government organizations from January 2023 to August 2024, stealing sensitive internal data and undermining their activities.
The hackers also obtained 'sensitive information' related to US government employees' identities and defense and security policies, which could be used for malign foreign influence operations by the Russian government. The hackers are linked to Russia's FSB intelligence agency, known for surveilling dissidents at home and abroad.
Last year, the UK government accused the same Russian hacking group of attempting to interfere in UK political processes by targeting politicians, civil servants, and journalists. The FSB has been using cyber campaigns extensively since Russia's invasion of Ukraine in 2022 to counter Western support for Ukraine.
The NGO Information Sharing and Analysis Center, along with nonprofit Access Now, played a crucial role in the legal action that led to the seizure of the internet domains. The victims who shared their stories and data were commended for their courage in making this action possible.
The Russian Embassy in Washington, DC, has been requested to comment on the matter, although the Kremlin typically denies US allegations of hacking, despite detailed evidence supporting the claims.