Wednesday , April 2 2025

FBI Disables ‘Sophisticated’ Russian Snake Cyberspying Tool

U.S. officials announced on Tuesday that they had destroyed a worldwide network of compromised computers that Russian intelligence personnel had used to spy on the U.S. and its allies for over 20 years.

It has been reported that a branch of Russia’s Federal Security Service (FSB) stole classified material from hundreds of infiltrated computer networks in at least 50 countries by using malicious software known as Snake.

Check Point said BreachForum post old data

Israeli cybersecurity firm Check Point has responded to a hacker who claimed to have stolen valuable information from its systems....
Read More
Check Point said BreachForum post old data

Apple Warns of 3 Zero Day Vulns Actively Exploited

Apple has issued an urgent security advisory about 3 critical zero-day vulnerabilities—CVE-2025-24200, CVE-2025-24201, and CVE-2025-24085—that are being actively exploited in...
Read More
Apple Warns of 3 Zero Day Vulns Actively Exploited

24,000 unique IP attempted to access Palo Alto GlobalProtect portals

GreyNoise has detected a sharp increase in login scanning aimed at Palo Alto Networks PAN-OS GlobalProtect portals. In the past...
Read More
24,000 unique IP attempted to access Palo Alto GlobalProtect portals

CVE-2025-1268
Patch urgently! Canon Fixes Critical Printer Driver Flaw

Canon has announced a critical security vulnerability, CVE-2025-1268, in printer drivers for its production printers, multifunction printers, and laser printers....
Read More
CVE-2025-1268  Patch urgently! Canon Fixes Critical Printer Driver Flaw

Within Minute, RamiGPT To Escalate Privilege Gaining Root Access

RamiGPT is an AI security tool that targets root accounts. Using PwnTools and OpwnAI, it quickly navigated privilege escalation scenarios...
Read More
Within Minute, RamiGPT To Escalate Privilege Gaining Root Access

Australian fintech database exposed in 27000 records

Cybersecurity researcher Jeremiah Fowler recently revealed a sensitive data exposure involving the Australian fintech company Vroom by YouX, previously known...
Read More
Australian fintech database exposed in 27000 records

Over 200 Million Info Leaked Online Allegedly Belonging to X

Safety Detectives' Cybersecurity Team found a forum post where a threat actor shared a .CSV file with over 200 million...
Read More
Over 200 Million Info Leaked Online Allegedly Belonging to X

FBI investigating cyberattack at Oracle, Bloomberg News reports

The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new tab that has led to...
Read More
FBI investigating cyberattack at Oracle, Bloomberg News reports

OpenAI Offering $100K Bounties for Critical Vulns

OpenAI has increased its maximum bug bounty payout to $100,000, up from $20,000, to encourage the discovery of critical vulnerabilities...
Read More
OpenAI Offering $100K Bounties for Critical Vulns

Splunk Alert User RCE and Data Leak Vulns

Splunk has released a security advisory about critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These issues could lead...
Read More
Splunk Alert User RCE and Data Leak Vulns

According to the Russian government, the compromised computers belonged to NATO member governments, journalists, and other individuals of interest.

The information was sent back to Russia using hacked computers in the United States and elsewhere.

According to the Department of Justice, Snake is the “leading cyberespionage malware implant” used by the FSB.

“The Justice Department, together with our international partners, has dismantled a global network of malware-infected computers that the Russian government has used for nearly two decades to conduct cyber-espionage, including against our NATO allies,” said Attorney General Merrick Garland. In response to the Russian regime’s efforts to undermine U.S. and allied security, “continued strengthening of our collective defenses” will be implemented.”

The Justice Department announced that the FBI’s Operation MEDUSA successfully dissolved the Snake network with judicial approval. The operation used a tool developed by the FBI called PERSEUS to remove the Snake virus from infected machines.

Officials have stated that the department is collaborating with foreign governments in order to inform further people who have contracted the Snake sickness.

For more than twenty years, the FBI has monitored Snake and other malware programs, eventually creating the means to decrypt and decode communications involving Snake.

In a statement, Deputy Attorney General Lisa Monaco claimed that the takedown “has neutralized one of Russia’s most sophisticated cyber-espionage tools, used for two decades to advance Russia’s authoritarian objectives.”

“By combining this action with the release of the information victims need to protect themselves, the Justice Department continues to put victims at the center of our cybercrime work and take the fight to malicious cyber actors,” Monaco said.

The FSB Turla unit, according to court records unsealed on Tuesday, operated the Snake robot out of a known FSB base in the Russian city of Ryazan to carry out everyday espionage activities.

In order to maintain its status as “Turla’s most sophisticated long-term cyberespionage malware implant,” the unit has modified and changed the virus on multiple occasions, as stated by the Justice Department.

Conclusion

On Tuesday, the U.S. government disrupted a global network infected by Russia’s Federal Security Service (FSB) Snake virus. Snake, the “most sophisticated cyber espionage tool,” was created by Turla (aka Iron Hunter, Secret Blizzard, SUMMIT, Uroburos, Venomous Bear, and Waterbug), a Russian state-sponsored entity the U.S. government attributes to Center 16 of the FSB. The threat actor has previously focused on Europe, the Commonwealth of Independent States (CIS), and NATO countries.

Still, it has recently expanded to include Middle Eastern nations considered a threat to Russia-supported regional countries. “For nearly 20 years, this unit has used versions of the Snake malware to steal sensitive documents from hundreds of computer systems in at least 50 countries, which have belonged to North Atlantic Treaty Organization (NATO) member governments, journalists, and other targets of interest to the Russian Federation,” the Justice Department said. “After stealing these documents, Turla exfiltrated them through a covert network of unwitting Snake-compromised computers in the United States and worldwide.”

Check Also

FBI

FBI investigating cyberattack at Oracle, Bloomberg News reports

The Federal Bureau of Investigation (FBI) is probing the cyberattack at Oracle (ORCL.N), opens new …

Leave a Reply

Your email address will not be published. Required fields are marked *