Russian Intelligence Services have been engaging in a sustained cyber campaign aimed at interfering in UK politics and democratic processes.
The National Cyber Security Centre, part of GCHQ, alongside international partners, have identified the threat group responsible as Star Blizzard, linking it to Centre 18 of Russia's Federal Security Service.
The malicious activities conducted by Star Blizzard include targeting UK parliamentarians through spear-phishing since at least 2015, compromising UK-US trade documents leaked before the 2019 General Election and the 2018 compromise of the Institute for Statecraft, a UK think tank focused on defending democracy against disinformation.
The group has also reportedly targeted universities, journalists, public sector entities, NGOs and other civil society organizations involved in UK democracy.
The malicious actors selectively leaked information to undermine trust in politics in the UK and other like-minded states, aligning with Russian confrontation goals.
To address the threat, the NCSC and partners from the United States, Australia, Canada and New Zealand have issued a new cybersecurity advisory sharing technical details on the attackers' methods and providing guidance on defense strategies.
The NCSC has also released new guidelines for high-risk individuals, including politicians and journalists, to enhance their resilience to potential cyber-threats.
According to the NCSC, the exposed malicious activities are part of a broader pattern of cyber operations conducted by Russian Intelligence Services globally.
The NCSC had previously detailed the activities of the Star Blizzard group, also known as Callisto Group, Cold River and formerly Seaborgium, earlier this year.
This joint advisory comes in the wake of previous exposures, including the role of Russian Intelligence in compromises affecting ViaSat, SolarWinds and the targeting of critical national infrastructure.
This Cyber News was published on www.infosecurity-magazine.com. Publication date: Thu, 07 Dec 2023 15:30:46 +0000