London Daily

Focus on the big picture.
Saturday, Feb 04, 2023

Russian hacking team ‘Cold River’ targeted US nuclear scientists

Russian hacking team ‘Cold River’ targeted US nuclear scientists

A Russian hacking team known as “Cold River” targeted three nuclear research laboratories in the United States this past summer, according to internet records reviewed by Reuters and five cybersecurity experts.

Between August and September, as President Vladimir Putin indicated Russia would be willing to use nuclear weapons to defend its territory, Cold River targeted the Brookhaven (BNL), Argonne (ANL) and Lawrence Livermore National Laboratories (LLNL), according to internet records that showed the hackers creating fake login pages for each institution and emailing nuclear scientists in a bid to make them reveal their passwords.

Reuters was unable to determine why the labs were targeted or if any attempted intrusion was successful. A BNL spokesperson declined to comment. LLNL did not respond to a request for comment. An ANL spokesperson referred questions to the US Department of Energy, which declined to comment.

Cold River has escalated its hacking campaign against Kyiv’s allies since the invasion of Ukraine, according to cybersecurity researchers and western government officials. The digital blitz against the US labs occurred as UN experts entered Russian-controlled Ukrainian territory to inspect Europe’s biggest atomic power plant and assess the risk of what both sides said could be a devastating radiation disaster amid heavy shelling nearby.

Cold River, which first appeared on the radar of intelligence professionals after targeting Britain’s foreign office in 2016, has been involved in dozens of other high-profile hacking incidents in recent years, according to interviews with nine cybersecurity firms.

Reuters traced email accounts used in its hacking operations between 2015 and 2020 to an IT worker in the Russian city of Syktyvkar.

“This is one of the most important hacking groups you’ve never heard of,” said Adam Meyer, senior vice president of intelligence at US cybersecurity firm CrowdStrike. “They are involved in directly supporting Kremlin information operations.”

Russia’s Federal Security Service (FSB), the domestic security agency that also conducts espionage campaigns for Moscow, and Russia’s embassy in Washington did not respond to emailed requests for comment.

Western officials say the Russian government is a global leader in hacking and uses cyber-espionage to spy on foreign governments and industries to seek a competitive advantage. However, Moscow has consistently denied that it carries out hacking operations.

Reuters showed its findings to five industry experts who confirmed the involvement of Cold River in the attempted nuclear labs hacks, based on shared digital fingerprints that researchers have historically tied to the group.

The US National Security Agency (NSA) declined to comment on Cold River’s activities. Britain’s Global Communications Headquarters (GCHQ), its NSA equivalent, did not comment. The foreign office declined to comment.


‘Intelligence collection’


In May, Cold River broke into and leaked emails belonging to the former head of Britain’s MI6 spy service. That was just one of several ‘hack and leak’ operations last year by Russia-linked hackers in which confidential communications were made public in Britain, Poland and Latvia, according to cybersecurity experts and Eastern European security officials.

In another recent espionage operation targeting critics of Moscow, Cold River registered domain names designed to imitate at least three European NGOs investigating war crimes, according to French cybersecurity firm SEKOIA.IO.

The NGO-related hacking attempts occurred just before and after the October 18 launch of a report by a UN independent commission of enquiry that found Russian forces were responsible for the “vast majority” of human rights violations in the early weeks of the Ukraine war, which Russia has called a “special military operation.”

In a blog post, SEKOIA.IO said that, based on its targeting of the NGOs, Cold River was seeking to contribute to “Russian intelligence collection about identified war crime-related evidence and/or international justice procedures.” Reuters was unable independently to confirm why Cold River targeted the NGOs.

The Commission for International Justice and Accountability (CIJA), a nonprofit founded by a veteran war crimes investigator, said it had been repeatedly targeted by Russian-backed hackers in the past eight years without success. The other two NGOs, the International Center of Nonviolent Conflict and the Center for Humanitarian Dialogue, did not respond to requests for comment.

Russia’s embassy in Washington did not return a request seeking comment about the attempted hack against CIJA.

Cold River has employed tactics such as tricking people into entering their usernames and passwords on fake websites to gain access to their computer systems, security researchers told Reuters. To do this, Cold River has used a variety of email accounts to register domain names such as “goo-link online” and “online365-office com” which at a glance look similar to legitimate services operated by firms like Google and Microsoft, the security researchers said.


Deep ties to Russia


Cold River made several missteps in recent years that allowed cybersecurity analysts to pinpoint the exact location and identity of one of its members, providing the clearest indication yet of the group’s Russian origin, according to experts from Internet giant Google, British defense contractor BAE, and US intelligence firm Nisos.

Multiple personal email addresses used to set up Cold River missions belong to Andrey Korinets, a 35-year-old IT worker and bodybuilder in Syktyvkar, about 1,600 kilometers (1,000 miles) northeast of Moscow. Usage of these accounts left a trail of digital evidence from different hacks back to Korinets’ online life, including social media accounts and personal websites.

Billy Leonard, a Security Engineer on Google’s Threat Analysis Group who investigates nation state hacking, said Korinets was involved. “Google has tied this individual to the Russian hacking group Cold River and their early operations,” he said.

Vincas Ciziunas, a security researcher at Nisos who also connected Korinets’ email addresses to Cold River activity, said the IT worker appeared to be a “central figure” in the Syktyvkar hacking community, historically. Ciziunas discovered a series of Russian language internet forums, including an eZine, where Korinets had discussed hacking, and shared those posts with Reuters.

Korinets confirmed that he owned the relevant email accounts in an interview with Reuters but he denied any knowledge of Cold River. He said his only experience with hacking came years ago when he was fined by a Russian court over a computer crime committed during a business dispute with a former customer.

Reuters was able separately to confirm Korinets’ links to Cold River by using data compiled through cybersecurity research platforms Constella Intelligence and DomainTools, which help identify the owners of websites: the data showed that Korinets’ email addresses registered numerous websites used in Cold River hacking campaigns between 2015 and 2020.

It is unclear whether Korinets has been involved in hacking operations since 2020. He offered no explanation of why these email addresses were used and did not respond to further phone calls and emailed questions.

Comments

Brad 28 days ago
Al Qaeda 100% Pentagon Run: Michael Springman US Government Gives Terrorists Passport's
The US federal government is now, and has been, using Al Qaeda inside Syria in its years-long effort to overthrow the Syrian government.  So if Al Qaeda does, in fact, carry out another attack here inside the United States, we can thank our own federal government for making it possible.
The US government used the CIA to overthrow Ukraine in 2014 installed (Petro Poroshenko)

Then installed Zelensky a known actor/comedian on record.

The CIA is running this operation against the BRICS system but also to put NATO military bases along Thr Russian border.

For centuries, it has been at the center of a tug-of-war between powers seeking to control its rich lands and access to the Black Sea.
 Western

media will claim it's a people’s revolution, it was in fact a coup d’état scripted and staged by NGO (George Soros ) the U.S. State Department.

They’re linked to the CIA…CIA interests are not America’s interests, they never have been. The CIA has been morally corrupt since the beginning.”

Days after Russia invaded Ukraine in February, Stone condemned the “hysteria of the Western media” and called for a sober analysis of the geopolitical situation from all sides.

Watch: Oliver Stone’s Bombshell Ukraine On Fire 🔥
Brad 28 days ago
A 70-Year War on ‘Propaganda’ Built by the CIA
Udo Ulfkotte says all media controlled by the CIA: A 70-Year War on ‘Propaganda’ Built by the CIA

Western Journalists for Hire: How the CIA Buys News

CIA Buys News” Ulfkotte goes over how the CIA along with German Intelligence (BND) were guilty of bribing journalists to write articles that either spun the truth or were completely fictitious in order to promote a pro-western, pro-NATO bent, and that he was one of those bought journalists.

Ulfkotte finally built up the nerve to publish the book, in response to the erupting crisis in Ukraine stating

Ulfkotte has publicly stated:

I am deeply worried about the Ukrainian crisis and the possible devastating consequences for all of Europe and all of us…I am not at all pro-Russia, but it is clear that many journalists blindly follow and publish whatever the NATO press office provides. And this type of information and reports are completely one-sided”.

“I am ashamed of it. The people I worked for knew from the get-go everything I did. And the truth must come out. It’s not just about FAZ, this is the whole system that’s corrupt all the way.”

Udo Ulfkotte has since passed away. He died January 2017, found dead in his home, it is said by a heart attack. His body was quickly after cremated and thus prevented any possibility of an autopsy occurring.

In another interview Ulfkotte stated:

The articles appeared under my name several times, but they were not my intellectual product. I was once approached by someone from German Intelligence and the CIA, who told me that I should write about Gaddafi and report how he was trying to secretly build a chemical weapons factory in Libya. I had no information on any of this, but they showed me various documents, I just had to put my name on the article. Do you think this can be called journalism? I don’t think so.”

Newsletter

Related Articles

London Daily
Close
0:00
0:00
Charlie Munger, calls for a ban on cryptocurrencies in the US, following China's lead
You're Beautiful - James Blunt (Boyce Avenue acoustic cover)
Shell reports highest profits in 115 years
You Are So Beautiful
EU found a way to use frozen Russian funds
Postmodern Jukebox European Tour Version
First generation unopened iPhone set to fetch more than $50,000 at auction.
An old French tune (by Georges Brassens) Pomplamoose ft. John Schroeder
WARNING GRAPHIC CONTENT - US Memphis Police murdering innocent Tyre Nichols
Sattahip Motor Show 20
Almost 30% of professionals say they've tried ChatGPT at work
SONATE AU CLAIR DE LUNE - Moonlight sonata
Interpol seeks woman who ran elaborate exam cheating scam in Singapore
A kiss to build a dream on
What is ChatGPT?
Wiz Khalifa - See You Again ft. Charlie Puth, Furious
Bill Gates is ‘very optimistic’ about the future: ‘Better to be born 20 years from now...than any time in the past’
Wonderful Tonight - Eric Clapton (Boyce Avenue acoustic cover)
China is opening up for foreign investors.
Mean Blues
Tesla reported record profits and record revenues for 2022
La Chansonnette
Germany confirms it will provide Ukraine with Leopard 2 tanks
Pattaya Addicts
Prince Andrew and Virginia Giuffre Photo Is Fake: Ghislaine Maxwell
Franz Liszt - Liebestraum - Love Dream
Opinion | Israel’s Supreme Court Claims a Veto on Democracy
Dream a little dream of me
Moonwalker Buzz Aldrin Gets Married On His 93rd Birthday
Tu Vuo' Fa' L'Americano - Hetty & the Jazzato Band
Who’s Threatening Israeli Democracy?
Unchained Melody sung like you've NEVER heard!
Federal Reserve Probes Goldman’s Consumer Business
Dave Brubeck - Take Five
China's first population drop in six decades
Édith Piaf - Non, Je Ne Regrette Rien (Sofie)
Microsoft is finalising plans to become the latest technology giant to reduce its workforce during a global economic slowdown
Rondo Alla Turca
Israelis rally in three cities against Netanyahu legal reforms
Kiss of fire
China's foreign ministry branch in Hong Kong urges British gov't to stop the biased and double standards Hong Kong report
Ed Sheeran - Perfect (Amadeus violin cover instrumental)
Tesla slashes prices globally by as much as 20 percent
Tom Jones - I´ll Never Fall In Love Again 1967, 1989, 2001
Japan prosecutors indict man for ex-PM Shinzo Abe murder
Israel Cachao López - Guajira Clásica
1.4 Million Copies Of Prince Harry's Memoir 'Spare' Sold On 1st Day In UK
Edward Maya - Stereo Love (feat. Vika Jigulina) (Extended Mix)
After Failing To Pay Office Rent, Twitter May Sell User Names
Strauss - Radetzky March - Karajan
Lisa Marie Presley, singer and daughter of Elvis, dies aged 54
La vie en rose
FIFA president questioned by prosecutors
Despacito (Piano Cover) - Peter Bence
Britain's Sunak breaks silence and admits using private healthcare
The Temptations - My Girl (Smokey Robinson Tribute) 2006 Kennedy Cent
Dirty bomb fears as URANIUM is found in cargo at Heathrow
Orlando Cachaito Lopez Redencion
Hype and backlash as Harry's memoir goes on sale. Unnamed royal source says prince 'kidnapped by cult of psychotherapy and Meghan'
Edith Piaf - NON, JE NE REGRETTE RIEN
Saudi Arabia set to overtake India as fastest-growing major economy this year 
RADETZKY MARCH-2008-Wien, New Year Concert
Google and Facebook’s dominance in digital ads challenged by rapid ascent of Amazon and TikTok
Only you (And you alone)
FTX fraud investigators are digging deeper into Sam Bankman-Fried's inner circle – and reportedly have ex-engineer Nishad Singh in their sights
Beautiful in White x Canon in D (Piano Cover by Riyandi Kusuma)
TikTok CEO Plans to Meet European Union Regulators
Strangers In The Night
UK chaos: Hong Kong emigrants duped by false prospectus
Charles Aznavour - La Boheme
France has banned the online sale of paracetamol until February, citing ongoing supply issues
Summer time
Japan reportedly to give families 1 million yen per child to move out of Tokyo
Sting and Stevie Wonder - Fragile (from Sting's 60th birthday concert)
Saudi Arabia’s female ambassadors: Who are the five women representing the Kingdom?
Aux Champs Elysees
Will Canada ever become a real democracy?
Stand By Me - Ben E. King (Boyce Avenue acoustic cover)
Hong Kong property brokerages slash payrolls in choppy market
La Mer (Beyond the Sea) – Avalon Jazz Band
U.S. Moves to Seize Robinhood Shares, Silvergate Accounts Tied to FTX
She
Effect of EU sanctions on Moscow is ‘less than zero’ – Belgian MEP
Nathalie Song by Enzo Petrachi Stjepan Hauser Cello
Coinbase to Pay $100 Million in Settlement With New York Regulator
Shape of My Heart - Sting (Boyce Avenue acoustic cover)
FTX assets worth $3.5bn held by Bahamas securities regulator
Radiohead - Creep
A Republican congressman-elect is under investigation in New York after he admitted he lied about his education and work experience.
Quizás,Quizás,Quizás - Andrea Bocelli - Jennifer Lopez
Brazilian football legend Pele, arguably the greatest player ever, has died at the age of 82.
Perhaps, Perhaps, Perhaps - Multi-Couples
Hong Kong to scrap almost all its Covid rules
Pentatonix Havana
EU calls screening of travellers from China unjustified
Paula Cole - Autumn Leaves
US imposes Covid testing for visitors from China
Oscar Benton Bensonhurst Blues
Clashes erupt in central Paris after shooting at a Kurdish cultural center
OH NANANA vs ABUSADAMENTE
Nina Simone - ”I Put A Spell On You”. Vezi aici cum cântă Jeremy Ragsd
NIGHTWISH - The Phantom Of The Opera
Motorshow 2016 Tanjay Negros Oriental
Monica Bellucci - Ti Amo
Michael Jackson - Billie Jean Milena The Voice France 2018
Michael Buble (Help Me Make It Through The Night) feat Loren Allred
Memories Canon In D - Maroon 5 (Boyce Avenue piano acoustic cover)
Matteo Simoni - Marina
Maroon 5 - One More Night
Maroon 5 - Memories
Mark Knopfler - Brothers In Arms (Berlin 2007 Live)
Mark Knopfler & Emmylou Harris - Romeo And Juliet (Real Live Roadrunni
Marina, Marina - The LUCKY DUCKIES intimist live concert at Guimarães
Major Lazer & DJ Snake – Lean On Mauranne The Voice France 2016
Love Theme from Romeo and Juliet - Joslin - Henri Mancini, Nino Rota
LoLa & Hauser - Love Story
Linkin Park Jay-Z - Numb Encore (Live 8 2005)
Hallelujah Mennel Ibtissem, The Voice France Leonard Cohen
Leonard Cohen - Dance Me to the End of Love
Leonard Cohen & Natasha Rostova - Dance me to the end of love
La casa de papel - Bella Ciao
La Camisa Negra
L'italiano (Toto Cutugno) - The Gypsy Queens
Juanes - La Camisa Negra
Jonathan and Charlotte - Britain's Got Talent 2012 Live Semi Final - U
John Powell - Assassin's Tango
Joe Cocker - You Can Leave Your Hat On (LIVE in Dortmund)
Joe Cocker - Unchain My Heart 2002 Live
Joe Cocker - A Whiter Shade Of Pale
Jay Z & Alicia Keys - Empire State of Mind LIVE
Jason Mraz - Im Yours (live)
Jarrod Radnich - Bohemian Rhapsody - Virtuosic Piano Solo
James Blunt - You're Beautiful
James Blunt - You're Beautiful & Bonfire Heart (Live at The Nobel Peac)
If You Go Away - Helen Merrill & Stan Getz (Tribute to Virna Lisi)
I'LL BE MISSING YOU
I Say a Little Prayer
Hotel California ( Eagles ) 1994 Live
Historia de un amor - Luz Casal. Vezi interpretarea Biancăi Sumanariu
Here Comes The Sun - The Beatles (Boyce Avenue acoustic cover) on Spot
Heart - Stairway to Heaven Led Zeppelin - Kennedy Center Honors
HAVANA by Camila Cabello Zumba Pre Cooldown TML Crew Kramer Pastra
HAUSER and Señorita - I Will Always Love You
HAUSER - Waka Waka
HAUSER - Sway
HAUSER - Lambada
HAUSER - Historia de un Amor
HAUSER - Despacito
Great Pretender
Georgia May Foote & Giovanni Pernice Samba to 'Volare' - Strictly Come
Gary Moore - Still Got The Blues
GIPSY KINGS VOLARE Penelope Cruz
Fugees - Killing Me Softly With His Song
French Latino - Historia de un Amor
For A Few Dollars More The Danish National Symphony Orchestra (Live)
Flashdance • What a Feeling • Irene Cara
Filip Rudan - “Someone You Loved” Audicija 4 The Voice Hrvatska Sez
Eric Clapton - Wonderful Tonight
Enya - Only Time
Enrique Iglesias - Bailando (English Version) ft. Sean Paul
Enrique Iglesias - Bailamos
Elena Yerevan Historia de un amor
Ed Sheeran - Shape of You (Official Music Video)
Ed Sheeran - Perfect Symphony [with Andrea Bocelli]
Ed Sheeran - Perfect (Official Music Video)
Easy On Me - Adele (Boyce Avenue 90’s style piano acoustic cover) on S
ERA - Ameno
ELENA YEREVAN- Cancion Del Mariachi-IN STUDIO-2017 DPR
Dust In The Wind - Kansas (Boyce Avenue acoustic cover)
Don't Let Me Be Misunderstood
Despacito x Shape Of You - Pentatonix
Deep Purple - Child In Time - Live (1970)
David Foster When A Man Loves A WomanIt's A Mans World (SealMichael Bo
Dance me to the end of Love ( Pi-Air Design )
Coolio - Gangsta's Paradise (feat. L.V.) [Official Music Video]
Conquest Of Paradise (Vangelis), played on Böhm Emporio organ
Cielito Lindo
Chico & The Gypsies - Bamboleo
Canción Del Mariachi - Antonio Banderas, Los Lobos • Desperado
Camila Cabello - Havana (Audio) ft. Young Thug
Camila Cabello - Havana ( cover by J.Fla )
California Dreamin' - The Mamas & The Papas José Feliciano (Boyce Ave
Buster Benton - Money Is The Name of The Game
Hallelujah Pentatonix
Bobby McFerrin - Don't Worry Be Happy (Official Music Video)
Bob Dylan - Knockin' On Heaven's Door Emilia The Voice Kids France
Besame Mucho - Cesaria Evora
Ben E. King - Stand by Me Sax Cover Alexandra Ilieva Thomann
Bella Ciao
Bella Ciao - INSTRUMENTAL
Beautiful in White x Canon in D (Piano Cover by Riyandi Kusuma)
Bad Romance - Vintage 1920's Gatsby Style Lady Gaga Cover ft. Ariana Savalas & Sarah Reich(1)
BELLA CIAO 2020 - KARAOKE ITALIANO
BAMBOLEO - Gipsy Kings • Antonio Banderas, Katya Virshilas
BAILANDO (original)
Awesome Ukrainian yodeler - SOFIA SHKIDCHENKO (with English subtitles)
Avicii - The Nights
Atom - The Great Gig in the Sky
Aretha Franklin - (You Make Me Feel Like) A Natural Woman (Official Ly
Antonio Banderas - Cancion del Mariachi (Desperado)
André Rieu - Zorba's Dance (Sirtaki)
André Rieu - Can't Help Falling In Love
André Rieu & Mirusia - Ave Maria
Andrew Reyes Elton John - Don't Let The Sun Go Down The Voice 2020 (
Andreas Kümmert Whiter Shade Of Pale The Voice of Germany 2013 Showd
And I Love You So
All About That Bass - Postmodern Jukebox European Tour Version
Alan Walker - Faded (Piano Cover)
Ain't No Sunshine -- Bill Withers (cover by Canen 12 y.o.)
African music
Adriana Vidović - “Creep” Audicija 4 The Voice Hrvatska Sezona 3
Adriana Vidović - “Believer” Nokaut 3 The Voice Hrvatska Sezona 3
A Fistful of Dollars - The Danish National Symphony Orchestra and Tuva
4 Beautiful Soundtracks Relaxing Piano [10min]
2CELLOS - Whole Lotta Love vs. Beethoven 5th Symphony [OFFICIAL VIDEO]
2CELLOS - Smooth Criminal (Live at Suntory Hall, Tokyo)
2CELLOS - Smells Like Teen Spirit [Live at Sydney Opera House]
2CELLOS - Despacito [OFFICIAL VIDEO]
13 Year Old Girl Playing Il Silenzio (The Silence) - André Rieu
094.All About That Bass
00 - SADNESS PART 1
(Ghost) Riders In the Sky (American Outlaws Live at Nassau Coliseum, 1
(Everything I Do) I Do It For You - Bryan Adams (Boyce Avenue ft. Conn
What a wonderful world
Moon river
×