The Department of Homeland Security is the third federal agency to have fallen victim to a major cyberespionage campaign by the Russian government, joining the Treasury and Commerce departments as targets that have been compromised, officials said Monday.
The list of victims is expected to grow and to include more private companies, said officials and others familiar with the matter, who spoke on condition of anonymity because the matter is under investigation.
The fact that the department charged with safeguarding the country from physical and cyber attack was victimized underscores the campaign’s significance and calls into question the adequacy of federal cybersecurity efforts.
DHS spokesman Alexei Woltornist said that DHS is aware of reports of a breach and is currently investigating the matter. The compromise of that agency was first reported by Reuters.
The Russian intelligence service, SVR, is believed to be behind the sophisticated campaign, which has been running since at least the spring. The hackers gained access to their victims’ systems through what is known as a “supply chain” attack, or taking advantage of routine software patches sent to these systems by a firm, SolarWinds, that provides network management tools.
https://www.washingtonpost.com/nati...f8fc98-3e3c-11eb-8bc0-ae155bee4aff_story.html