The Growing Threat Of Russian Cyber Reprisals On Britain

Banks, energy and water companies are on maximum alert over the threat of a serious cyber-attack from Moscow as concern continues over the safety of Russian exiles in the UK.

Fears that Russia will target Britain’s critical national infrastructure have prompted round-the-clock threat assessments by the UK’s financial sector, energy firms and GCHQ, the UK’s largest intelligence agency, along with the security services MI5 and MI6.

The Bank of England, major financial institutions, including Lloyds and organisations such as Water UK are working with the government’s National Cyber Security Centre (NCSC) to assess the next move from Moscow following the murder of Nikolai Glushkov, 68, and the Salisbury chemical attack.

Scotland Yard on Saturday 17th March issued a renewed appeal for information for anyone who may have seen a burgundy red BMW owned by Sergei Skripal, 66, the former Russian spy who was found unconscious on 4 March in Salisbury along with his daughter, Yulia.

The pair were poisoned with a nerve agent and remain critical but stable in hospital. Glushkov, a businessman and a known critic of President Vladimir Putin, was found strangled at his home in London last week. 

Police across Britain have begun contacting Russian exiles to discuss their safety as they investigate the murder of Glushkov, understood to have been on a list of 22 “fugitives” published by the Russian embassy in London last year. Officers have yet to establish if there is a link between the attacks.

Intelligence officials, however, fear that Moscow may strike next using very different methods, referring to Russia’s involvement in the crippling NotPetya ransomware cyber-attack last year that targeted Ukraine’s financial, energy and government sectors before it spread across the world.

On Thursday 15th March the Trump administration accused Russia of engineering a series of cyber-attacks that targeted American and European nuclear power plants and water and electricity systems, the first time the United States has publicly accused Moscow of hacking into America’s energy infrastructure.

The UK’s NCSC is based inside GCHQ and notifies UK firms considered to be “critical national infrastructure” and the government of the latest threat level. It is monitoring significant Russian activity in the UK, though it is understood that no specific threat from Russia has emerged since the attempted murder of Skripal and his 33-year-old daughter and the murder of Glushkov. Robert Hannigan, a former director of GCHQ and the National Security Council, told the Observer that the NCSC was monitoring “very large volumes” of attacks every day on the UK, including its globally important financial services.
Hannigan, who was responsible for the UK’s first cyber strategy in 2009 and is now a senior associate fellow at the Royal United Services Institute, said that from his experience, which also includes three years as prime minister Tony Blair’s security adviser, he had never seen Russia so unpredictable and hostile. “In their [the Russians] current mood it’s hard to know what they will do. What’s different now is the willingness to be reckless, not to play by the rules that most civilised countries play by and not to worry about being found out. They no longer seem to care.”

Hannigan said they were continually detecting Russians on UK cyber networks. “They’re constantly being found on networks but it’s their intent that matters more than the fact they are there. The difficulty with cyber is that you can be on a network to gather intelligence or you can be on a network to do something destructive and the two look pretty much the same.”

A senior banking source, confirming that the sector was working closely with GCHQ and the security services to evaluate any threat from Russia, said they were also concerned about the risk of attack, not just from the Kremlin but from rogue elements caught up in the febrile climate that has prevailed since the Salisbury chemical attack. 

“It is possible that Russian patriots may take it upon themselves to make a point at a time like this,” said the source.
A Lloyds spokesman said: “We update and test our defences regularly and work closely with both industry bodies and law enforcement agencies to help us protect our customers.” 

A Water UK spokesperson, which represents the major water companies, said it was in regular contact with government officials to ensure its cyber defences were sufficiently robust. 

The UK government has floated the idea of fining organisations which fail to implement effective cyber security measures as part of plans to make Britain’s essential infrastructure resilient against future cyber-attacks. 

Beyza Unal, a research fellow at Chatham House’s international security department, said that the UK had been shoring up its defences in the face of the evolving cyber threat. “The UK has a really good cyber defence strategy planning as well as organisation, each sector talks to the government organisations,” she said.

Latest figures from the NCSC reveal more than 1,100 attacks over the past year, 590 significant. Thirty required action by government bodies, a number of which targeted the UK’s internationally important financial sector.

Guardian

You Might Also Read:

Russia Warns UK Against Cyber Retaliation:

British IT Bosses Fear Sophisticated Cyber Threats:

UK To Increase National Cyber Defences:
 

« North Korea's Cyber Soldiers Are Concealed Abroad
Millions Of Facebook Profiles Were ‘Harvested’ In US Election Breach »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Directory of Cyber Security Suppliers

Directory of Cyber Security Suppliers

Our Supplier Directory lists 7,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

ZenGRC

ZenGRC

ZenGRC (formerly Reciprocity) is a leader in the GRC SaaS landscape, offering robust and intuitive products designed to make compliance straightforward and efficient.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

Alvacomm

Alvacomm

Alvacomm offers holistic VIP cybersecurity services, providing comprehensive protection against cyber threats. Our solutions include risk assessment, threat detection, incident response.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

National Crime Agency (NCA) - United Kingdom

National Crime Agency (NCA) - United Kingdom

The NCA's Cyber Crime Unit focuses on critical cyber incidents in the UK as well as longer-term activity against the criminals and the services on which they depend.

StickyMinds

StickyMinds

StickyMinds is the web's first interactive testing community exclusively engaged in improving software quality throughout the software development lifecycle.

International Conference on Information Systems Security & Privacy (ICISSP)

International Conference on Information Systems Security & Privacy (ICISSP)

The ICISSP event is a meeting point for researchers and practitioners to address security and privacy challenges concerning information systems.

ThreatBook

ThreatBook

ThreatBook is dedicated to providing real-time, accurate and actionable threat intelligence to block, detect and prevent attacks.

Cyber Army Indonesia (CyberArmyID)

Cyber Army Indonesia (CyberArmyID)

Cyber Army Indonesia (CyberArmyID) is the first platform in Indonesia to collect and validate reports from hackers (referred to as Bug Hunter) regarding vulnerabilities that exist in an organization.

Censys

Censys

Our customers rely on Censys data to get the global visibility they need of their attack surfaces in order to proactively prevent nation-state attacks and emerging threats.

Bolster

Bolster

Bolster (formerly RedMarlin) is an AI-based cyber-security platform designed to detect phishing and fraudulent sites in real-time.

CICRA Consultancies

CICRA Consultancies

Cicra Consultancies is a company that specializes in cyber security. Our major activities are guided by three main principles: Prevent, Investigate, Prosecute.

Pires Investments

Pires Investments

Pires is building an investment portfolio of high-tech businesses across areas such as Artificial Intelligence, Internet of Things, Cyber Security and Augmented/Virtual Reality.

The Citadel Department of Defense Cyber Institute (CDCI)

The Citadel Department of Defense Cyber Institute (CDCI)

CDCI is established to address the critical national security needed for a skilled cybersecurity workforce.

Zeva

Zeva

Zeva solves complex identity and encryption challenges for the federal government and corporations around the globe.

Responsive Technology Partners

Responsive Technology Partners

Responsive Technology Partners provides superior IT support services including cybersecurity and compliance, telephony, cloud services, cabling, access control, and camera systems.

Web3fied

Web3fied

Web3fied is a seed stage company building the future of decentralized digital identity and credentials management.

Interactive

Interactive

Interactive are a leading Australian IT service provider with services in Cloud, Cyber Security, Data Centres, Business Continuity, Hardware Maintenance, Digital Workplace, and Networks.

Silent Circle

Silent Circle

Silent Circle is the leader in end-to-end enterprise solutions for secure mobile communications.

Pointsharp

Pointsharp

Pointsharp delivers software and services that help organizations secure data, identities, and access in a user-friendly way.