The American company “Microsoft” announced yesterday that the discovery of an electronic spy campaign, which it described as “complex” targeting a number of Western embassies in Moscow, by exploiting the local Internet infrastructure and communications networks that diplomats depend on in the Russian capital. The company stated, in a technical report, that a Russian piracy group, known as “Sakrat Plasard”, published an advanced spy program called “Apollo Shadou” inside the systems of Internet and communications service providers in Russia, with the aim of intercepting sensitive data related to diplomatic missions and its employees.
According to what was reported by the specialized “Nicks Gof” website, it is more likely that the pirates took advantage of what is known as the “legal eavesdropping structure” in Russia, to plant malicious software in the targeted networks. Microsoft explained that the attack, which is known as the “Adversary-IN-THE-TEDLE”, is done through redirect to direct diplomatic devices to a fictitious entry page similar to electronic gates used in hotels and airports, and then the Windows system tries to verify the internet connection, but this process is converted into a server-controlled server.
She noted that the victims may receive a fake warning about the digital safety certificate, and then – to be deceptive in a deceptive way – to download the “Apollo Shadow” program, which is hidden in the form of the “Caspersky” anti -virus program. Once the installation is accepted, the attackers get wide powers that allow them to access encrypted communications information.
It should be noted that the Russian company “Kaspersky” specialized in cybersecurity was prevented last year from commercial dealing in the United States, and its leaders were subjected to US sanctions. Microsoft did not specify the names of the embassies or consulates that were targeted, but it confirmed that the “Sakrat Plasard” group is one of the units associated with the Russian Federal Security Agency FSB, and that its activity was monitored in about 50 countries around the world, according to previous warnings issued by the American Cyber Security Agency.
