German authorities suspect the Russian cyber espionage group, “Snake” (aka “Turla” or “Uruburos”), to be behind an attack on the government’s computer network. The authorities only became aware of it in December; they believe the attack had been under way for a year. Snake is believed to have links to Russian intelligence.
The group’s existence was revealed in 2014 as it was believed to be behind the aggressive cyber espionage operations against Ukraine and a host of other European and US government organizations for nearly a decade.
Security sources believe Snake gained access to the network via the German Federal Academy of Public Administration. The attackers seem to have implanted malware and then searched the federal government’s extensive server network for a way into the German foreign ministry, with particular interest in information about Germany’s Russia policy.
The German domestic intelligence agency’s report for 2016 suggests Russian hackers had been operating a campaign of attacks since 2005 using highly complex and sophisticated malware known as Uruburos, Snake or Turla. Germany’s interior minister said the hack had been isolated and was brought under control by security services. Some members of the German parliament have heavily criticized the government for holding back information on the attack for two months after learning about it.
Technology and Security 