US cites Russia as likely hacking culprit, bucking president Trump

Bloomberg

US intelligence agencies and the Federal Bureau of Investigation (FBI) said a major hack of the federal government and some corporations was likely undertaken by Russia — contradicting President Donald Trump’s efforts to suggest China might be responsible — and “will require a sustained and dedicated effort to remediate.”
The FBI is still focused on identifying victims, collecting and analysing evidence and sharing information about the sophisticated hack, according to a joint statement from the FBI, National Security Agency, Office of the Director of National Intelligence and the Cybersecurity and Infrastructure Security Agency.
The cyber-attacks are ongoing, according to the agencies.
The hack targeted updates in widely used software from Austin, Texas-based SolarWinds Corp., which has said as many as 18,000 of its customers may have received the malicious code. According to the statement, the agencies believe that “a much smaller number has been compromised by follow-on activity on their systems.” That means the hackers left most of the SolarWinds’s customers who received the malicious update alone but pursued further attacks against a smaller number of them.
“We have so far identified fewer than 10 US government agencies that fall into this category, and are working to identify the nongovernment entities who also may be impacted,”
according to the statement. Russia has rejected accusations it was behind the hack.
However, in the statement, the agencies said the attacks were likely “Russian in origin” and are believed to be “an intelligence gathering effort.”
The statement is the latest contradiction of Trump’s assessment of the hack. Attorney General William Barr and Secretary of State Mike Pompeo have previously said Russia was likely responsible.
“The Cyber Hack is far greater in the Fake News Media than in actuality. I have been fully briefed and everything is well under control. Russia, Russia, Russia is the priority chant when anything happens because Lamestream is, for mostly financial reasons, petrified of discussing the possibility that it may be China (it may!),” Trump wrote in a series of tweets on December 19.
In a statement, Mark Warner, the top Democrat on the Senate Intelligence Committee, criticised the Trump administration for waiting for more than three weeks after the hacking campaign was revealed to “finally issue a tentative attribution.”
“We need to make clear to Russia that any misuse of compromised networks to produce destructive or harmful effects is unacceptable and will prompt an appropriately strong response,” he said.