London Daily

Focus on the big picture.
Friday, May 23, 2025

Snake - Russia's Most Advanced Cyber Espionage Tool And Why It's So Dangerous

Snake - Russia's Most Advanced Cyber Espionage Tool And Why It's So Dangerous

The malware in question is Snake, a cyber espionage tool deployed by Russia's Federal Security Service that has been around for about 20 years.

Like most people I check my emails in the morning, wading through a combination of work requests, spam and news alerts peppering my inbox.

But yesterday brought something different and deeply disturbing. I noticed an alert from the American Cybersecurity and Infrastructure Security Agency (CISA) about some very devious malware that had infected a network of computers.

The malware in question is Snake, a cyber espionage tool deployed by Russia's Federal Security Service that has been around for about 20 years.

According to CISA, the Snake implant is the “most sophisticated cyber espionage tool designed and used by Center 16 of Russia's Federal Security Service for long-term intelligence collection on sensitive targets”.


The stealthy Snake


The Russian Federal Security Service developed the Snake network in 2003 to conduct global cyber espionage operations against NATO, companies, research institutions, media organisations, financial services, government agencies and more.

So far, it has been detected on Windows, Linux and macOS computers in more than 50 countries, including Australia.

Elite Russian cyber espionage teams put the malware on a target's computer, copy sensitive information of interest and then send it to Russia. It's a simple concept, cloaked in masterful technical design.

Since its creation, Russian cyber spies have regularly upgraded the Snake malware to avoid detection. The current version is cunning in how it persistently evades detection and protects itself.

Moreover, the Snake network can disrupt critical industrial control systems that manage our buildings, hospitals, energy systems, water and wastewater systems, among others – so the risks went beyond just intelligence collection.

There are warnings that in a couple of years bad actors may gain the capability to hijack critical Australian infrastructure and cause unprecedented harm by interfering with physical operations.

Snake hunting


On May 9, the US Department of Justice announced the Federal Bureau of Investigation had finally disrupted the global Snake peer-to-peer network of infected computers.

The covert network allowed infected computers to collect sensitive information. The Snake malware then disguised the sensitive information through sophisticated encryption, and sent it to the spy masters.

Since the Snake malware used custom communication protocols, its covert operations remained undetected for decades. You can think of custom protocols as a way to transmit information so it can go undetected.

However, with Russia's war in Ukraine and the rise in cybersecurity activity over the past few years, the FBI has increased its monitoring of Russian cyber threats.

While the Snake malware is an elegantly designed piece of code, it is complex and needs to be precisely deployed to avoid detection. According to the Department of Justice's press release, Russian cyber spies were careless in more than a few instances and did not deploy it as designed.

As a result, the Americans discovered Snake, and crafted a response.


Snake bites


The FBI received a court order to dismantle Snake as part of an operation code-named MEDUSA.

They developed a tool called PERSEUS that causes the Snake malware to disable itself and stop further infection of other computers. The PERSEUS tool and instructions are freely available to guide detection, patching and remediation.

The Department of Justice advises that PERSEUS only stops this malware on computers that are already infected; it does not patch vulnerabilities on other computers, or search for and remove other malware.

Even though the Snake network has been disrupted, the department warned vulnerabilities may still exist for users, and they should follow safe cybersecurity hygiene practices.


Snake bite treatment


Fortunately, effective cybersecurity hygiene isn't overly complicated. Microsoft has identified five activities that protect against 98% of cybersecurity attacks, whether you're at home or work.

1. Enable multi-factor authentication across all your online accounts and apps. This login process requires multiple steps such as entering your password, followed by a code received through a SMS message – or even a biometric fingerprint or secret question (favourite drummer? Ringo!).

2. Apply “zero trust” principles. It's best practice to authenticate, authorise and continuously validate all system users (internal and external) to ensure they have the right to use the systems. The zero trust approach should be applied whether you're using computer systems at work or home.

3. Use modern anti-malware programs. Anti-malware, also known as antivirus software, protects and removes malware from our systems, big and small.

4. Keep up to date. Regular system and software updates not only help keep new applications secure, but also patch vulnerable areas of your system.

5. Protect your data. Make a copy of your important data, whether it's a physical printout or on an external device disconnected from your network, such as an external drive or USB.

Like most Australians, I have been a victim of a cyberattack. And between the recent Optus data breach and the Woolworths MyDeal and Medibank attacks, people are catching on to just how dire the consequences of these events can be.

We can expect malicious cyberattacks to increase in the future, and their impact will only become more severe. The Snake malware is a sophisticated piece of software that raises yet another concern. But in this case, we have the antidote and can protect ourselves by proactively following the above steps.

If you have concerns about the Snake malware you can read more here, or speak to the fine folks at your IT service desk.The Conversation

Newsletter

Related Articles

0:00
0:00
Close
The Daily Debate: The Fall of the Dollar — Strategic Reset or Economic Self-Destruction?
UK Justice Secretary Advocates for Good Conduct Release Policies to Alleviate Prison Overcrowding
Trump Administration's Tariff Policies and Dollar Strategy Spark Global Economic Debate
UK Transfers Chagos Islands Sovereignty to Mauritius in Strategic Agreement
Bitcoin Surpasses $111,000 Mark for the First Time
Key Developments in UK Business and Economy
OpenAI Acquires Jony Ive’s Startup for $6.5 Billion to Build a Revolutionary “Third Core Device”
Turkey Weighs Citizens in Public as Erdoğan Launches National Slimming Campaign
Leaked Secret Report: How the Muslim Brotherhood Is Expanding in France—With Qatari Funding
BYD Surpasses Tesla in European Electric Vehicle Sales
West Nile Virus Detected in UK Mosquitoes for First Time
UK Exposes Russian Cyber Campaign Targeting Ukraine Aid Networks
UK Inflation Rises to 3.5% in April Amid Household Bill Increases
UK Suspends Trade Talks with Israel Amid Gaza Offensive
Taiwan claims China is using cash to win over developing nations
European Parliament Suspends Huawei Lobbyists Amid Corruption Probe
Industry Leaders Express Skepticism Over EU's New Single Market Strategy
European Parliament Considers Lifting Immunity of Five MEPs in Huawei Investigation
‘Plane Full of English Animals’: Footage Documents EasyJet Flight Chaos to Ibiza
Trump and Ramaphosa Hold Contentious White House Meeting Amid Diplomatic Strains
US Billionaires' Wealth Surges by $365 Billion Amid Tax Cut Debate
Sean 'Diddy' Combs Faces Federal Trial on Sex Trafficking and Racketeering Charges
India Blocks Thousands of Social Media Accounts Amid Tensions with Pakistan
Iran and U.S. Set for Fifth Round of Nuclear Talks Amid Rising Tensions
Russia Expands Military Presence Near Finland Amid Rising Tensions
Indian Scholar Arrested in Crackdown Over Pakistan Conflict Commentary
Ontario Manufacturers Warn U.S. Tariffs Could Create Economic 'Ghost Town'
UK and EU Reach Landmark Post-Brexit Deal to Reset Relations
Israel Eases Gaza Blockade Amid Internal Dispute Over Military Strategy
President Biden’s announcement of advanced prostate cancer sparked public sympathy—but behind closed doors, Democrats are in panic
Trump Demands Probe into Kamala Harris for Paying Celebs to Fake Endorsements
At Age 92, the World’s Oldest President Has No Succession Plan — and That Could Spark a Crisis
U.S. Concerns Mount Over Chinese 'Kill Switch' Components Found in Solar Power Infrastructure
Bipartisan Criticism Surrounds Trump's Cryptocurrency Ventures
Diplomatic Efforts on the Russia-Ukraine Conflict
Mexican Navy Ship Collides with Brooklyn Bridge, Injuries Reported
A Chinese company made solar tiles that look way nicer than regular panels!
U.S. and Philippine Forces Test High-Powered Microwave Weapons in Joint Exercise
China Unveils Advanced AI Surveillance Tools at 12th Police Equipment Expo
Japan's Three Major Banks Report Record High Net Profits for Second Consecutive Year
The Chinese Dragon: The True Winner in the India-Pakistan Clash
US and EU Make Progress in Trade Talks, While Vietnam Negotiations Also Advance
Sean 'Diddy' Combs Trial: Ex-Girlfriend Cassie Ventura Testifies About Alleged Abuse
Former Wales Rugby Star Jamie Roberts to Pursue Medical Career
Australia's Venomous Creatures Contribute to Life-Saving Antivenom Programme
Passenger Travels Under Wrong Identity on British Airways Flight
Former FBI Director James Comey Questioned by Secret Service Over Social Media Post
The Spanish Were Right: Long Working Hours Harm Brain Function
After 108 Years: Moody’s Downgrades U.S. Credit Rating
Did Former FBI Director Call for Violence Against Trump? Instagram Post Sparks Uproar
×