Cyber Command boss acknowledges US military actions against ransomware groups

President Joe Biden is scheduled to hold a video call with Russian President Vladimir Putin on Tuesday to discuss cybersecurity and a range of other issues.

The U.S. military has taken offensive measures against ransomware groups, U.S. Cyber Command leader Gen. Paul Nakasone confirmed Saturday.

“Before, during and since, with a number of elements of our government, we have taken actions and we have imposed costs,” Nakasone told The New York Times in an interview. “That’s an important piece that we should always be mindful of.”

CNN confirmed the offensive cyber-operations to disrupt foreign ransomware groups with a military spokesperson.

U.S. Cyber Command, the military’s top hacking unit, has reportedly been going after criminal groups dating back to before the 2020 election, when it attempted to knock out TrickBot, a network of infected computers used to deliver malware. More recently, the command had role in shutting down ransomware group REvil’s operations, working with foreign governments to redirect traffic from the group’s website, The Washington Post first reported in November.

Both the spokesperson and Nakasone declined to comment on specific operations.

The Biden administration has made taking on ransomware groups a top priority of its cybersecurity agenda after a series of attacks on U.S. critical infrastructure, including the disruption of major fuel provider Colonial Pipeline in May and July attack by REvil on IT firm Kaseya.

The growing number of ransomware attacks against critical U.S. targets has also become a key point of diplomatic tension with Russia, which is believed to harbor many ransomware actors.

“When I met with President Putin in June, I made clear that the United States would take action to hold cybercriminals accountable,” President Joe Biden said in a statement following the REvil takedown. “That’s what we have done today. We are bringing the full strength of the federal government to disrupt malicious cyber activity.”

Biden is scheduled to hold a video call with Russian President Vladimir Putin on Tuesday to discuss cybersecurity and a range of other issues.

Former NSA chiefs worry American offensive edge in cybersecurity is slipping

A systemic numbness to cyberattacks has exposed the U.S. economy and its institutions to ever-widening threats. Retired four-star military officials worry the worst day in cyber is…

While White House demands deterrence, Trump shrugs

BlackSuit, Royal ransomware group hit over 450 US victims before last month’s takedown

Government

• FBI officials say AI is bolstering adversaries, emphasizing need to focus on cyber basics, patching

• Feds accuse China of ‘systematic’ distillation of U.S. AI models

• CIA’s Michael Ellis says cyber intelligence is changing how the agency operates

• The G7 tells industry to hurry up and prep for post-quantum encryption

Technology

• European parliament members call for slowdown of Serbia’s EU entry over spyware use

• FCC proposes public scorecard to rate telecoms on anti-robocall efforts

• Pegasus, NoviSpy variant spyware found on devices of Serbian activists

• Wyden seeks upgraded NSA security guidance on commercial VPN use

Threats

• Chinese espionage groups swarm to exploit triple-link chain of zero-days

• Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

• Attackers exploit zero-days in consistently besieged SonicWall product

• Jail time for Maine child in 764 marks turning point in federal law enforcement

Policy

• Whistleblower says USPS deploying new, ‘untested’ IT systems governing mail-in ballots

• ‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help

• Former sexual abuse victims say Grok used their images, videos to train deepfake capabilities

• Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure