Those responsible for malware attacks in the lead-up to Russia's invasion of Ukraine have been announced as targets of fresh charges from the US government.
The US Justice Department has widened its indictment of Russians in the so-called WhisperGate malware attacks aimed at destroying computer systems in Ukraine and 26 NATO allies including the United States.
A run of charges released on Thursday names five Russian military intelligence officers in a conspiracy to demoralise the Ukrainian people on the eve of Russia's full-scale invasion of Ukraine in February 2022.
The WhisperGate attacks in January 2022 could be considered Russia's first shot in the war, said William DelBagno, special agent in charge of the FBI's Baltimore field office.
The cyber attacks penetrated US companies and targeted Ukraine's civilian infrastructure and computer systems unrelated to defence, including the judiciary, emergency services, food safety and education, officials said.
"Seeking to sap the morale of the Ukrainian public, the defendants also stole and leaked the personal data of thousands of Ukrainian civilians, including by posting patient health information and other sensitive private data for sale online and then taunting those victims," said Matthew Olsen, assistant attorney general for national security.
The attacks weren't limited to Ukraine, Mr Olsen said at the news conference in Baltimore, which also included Maryland US Attorney Erek Barron.
"They went on to target computer systems in other nations supporting Ukraine in its fight for survival," Mr Olsen continued.
"Ultimately, their targets included computer systems in 26 NATO partners, including the United States."
US, NATO and Ukrainian governments targeted
A federal grand jury in Baltimore indicted military intelligence officers Vladislav Borovkov, Denis Denisenko, Yury Denisov, Dmitry Goloshubov and Nikolai Korchagin along with Amin Timovich Stigal, a 22-year-old Russian civilian indicted in June.
It accuses them of conspiring to gain unauthorised access to computers associated with the governments of Ukraine and its allies.
Combined, the US government is offering $US60 million ($89 million) in rewards for help leading to their locations or malicious cyber activity.
All six are most likely in Russia, but federal officials said the indictment was useful anyway, to prevent them from travelling and to show that the US has exposed their conspiracy.
The US investigation, Operation Toy Soldier, found the accused committed fraud in the US by illegally accessing bank accounts and using a US company to unwittingly carry out their crimes, Mr DelBagno said.
"Adding insult to injury these individuals not only used tools to scan for vulnerabilities 63 times on a Maryland US-based government agency, but they also scanned our allies throughout the world, including Ukrainian servers and servers in various other countries," Mr Barron said.
The FBI and government partners in other countries are issuing a joint cybersecurity advisory that details how the attacks were carried out and what can be done to prevent them, officials said.
Wider crackdown on Russian agents
In January, the Justice Department also disrupted a botnet controlled by Russian military intelligence that officials say was used to enable crimes and espionage, and in May, officials announced charges against the alleged developer of a prolific ransomware variant known as LockBit.
Two employees of RT, a Russian state media company, were charged on Wednesday with covertly funnelling millions of dollars to a Tennessee-based content creation firm that paid social media influencers to publish videos in line with Russia's interests, such as on topics like the war with Ukraine.
Mr DelBagno said the indictments were the result of years of collaboration with partners and law enforcement in Europe.
In another move targeting Russia, the State Department on Thursday imposed sanctions against two Russian companies and two ships they own that export liquefied natural gas from a previously sanctioned Russian energy project in the Arctic.
AP
