Monday, March 3, 2025
HomeData BreachRussian Hackers Stole NSA Hacking Tools Using Kaspersky Software

Russian Hackers Stole NSA Hacking Tools Using Kaspersky Software

Published on

SIEM as a Service

Follow Us on Google News

Russian Government Hackers are using Kaspersky software to stole NSA Advance cyber Weapons such as secret spying tools from NSA Contractor Personal Home Computer who has been used the Russian Based Kaspersky Security Products.

This Incident reported by The Wall Street Journal  says, Stolen Information are Highly Sensitive Data such as how the NSA penetrates foreign computer networks.

Few Weeks Before, Kaspersky Security Softwares Ban to Use all US Government Agencies including NSA for a lot of Spying Activity Controversy against the Kaspersky Products.

Reason of Kaspersky Ban Stats that, access provided by Kaspersky products to compromise federal information and information systems directly implicates U.S. National security Because Kaspersky Software usually Communicate Directly into every file on the computers which Protect by them and it keeps communicate with Kaspersky Labs

This incident Leads to taking Advance by Russian Hackers and offers some of the useful and important insights that makes very hard for NSA Operations.

Also Read: Kaspersky Security Softwares Ban to Use all US Government Agencies

How Do Russian Hackers Steal NSA Hacking Tools

NSA Strictly Prohibited to take any information neither Data nor NSA Hacking Tools by any of their Contractors from its sensitive secrete Zone Because they Maintain Extremely Secret Cyber operation Details.

This incident Reported that One of the unnamed NSA Contractor has removed the material from the NSA and stored it on a home computer that ran a version of Kaspersky AV.

The Material Contains some of the Confidential Information such as “details about how the NSA penetrates foreign computer networks, the computer code it uses for such spying, and how it defends networks inside the US.

Security Experts Believes that NSA used Kaspersky Security Software alerts to Russian Hackers about the Presence of files that may have been taken from the NSA.

According to Wall Street Journal, Experts said the software, in searching for malicious code, may have found samples of it in the data the contractor removed from the NSA.
But how the antivirus system made that determination is unclear, such as whether Kaspersky technicians programed the software to look for specific parameters that indicated NSA material. Also unclear is whether Kaspersky employees alerted the Russian government to the finding.

No Information about the NSA Contractor Details was Revealed and The report also said it was unclear whether the contractor had lost his job or is facing prosecution.

Last Year Another NSA Contractor who had worked as a contractor for the NSA has been arrested for allegedly stealing classified material from NSA but he is not the person implicated in this case.

NSA Officials said, The man took his work home in violation of NSA rules, and Russian hackers were able to identify the material and access his machine because he was using Kaspersky software.

Kaspersky Denied Statement

Kaspersky says about this allegation, that Kaspersky Lab has not been provided any evidence substantiating the company’s involvement in the alleged incident Kaspersky Lab has not been provided any evidence substantiating the company’s involvement in the alleged incident.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Hackers Using PowerShell and Microsoft Legitimate Apps to Deploy Malware

Cybersecurity experts are warning of an increasing trend in fileless attacks, where hackers leverage...

JavaGhost: Exploiting Amazon IAM Permissions for Phishing Attacks

Unit 42 researchers have observed a threat actor group known as JavaGhost exploiting misconfigurations...

New Poco RAT Via Weaponized PDF Attacking Users to Capture Sensitive Data

A new variant of malware, dubbed "Poco RAT," has emerged as a potent espionage...

U.S. Suspends Cyberattacks Against Russia

The United States has suspended offensive cyber operations against Russia under an order issued...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

260 Domains Hosting 5,000 Malicious PDFs to Steal Credit Card Data

Netskope Threat Labs uncovered a sprawling phishing operation involving 260 domains hosting approximately 5,000...

Authorities Arrested Hacker Behind 90 Major Data Breaches Worldwide

Cybersecurity firm Group-IB, alongside the Royal Thai Police and Singapore Police Force, announced the...

Orange Communication Breached – Hackers Allegedly Claim 380,000 Email Records Exposed

Telecommunications provider Orange Communication faces a potential data breach after a threat actor using the pseudonym “Rey”...