LinkedIn, Twitter and Facebook, are not Likely to Survive Russian Internet Isolation Legislation

Social media giants, Twitter and Facebook, are in a legal struggle over previous Russian legislation which requires these companies to store Russian personal data in Russia. Currently, LinkedIn is banned in Russia. On 1 May 2019, Russian President Vladimir Putin signed “Internet sovereignty” bill.  Russia will develop its own DNS system to conduct special Internet controls. 

To read the full article and find an archive of related reporting, follow this link to READBOARD.

WWW.WAPACKLABS.COM

The LinkedIn, Dropbox, and Formspring Hacker: Yevgeniy Nikulin

Yevgeniy Nikulin is a potent Russian hacker responsible for major breaches including Linkedin, Dropbox and Formspring, as well as less known funds theft from a Bitcoin hedge fund and from individuals. After his arrest in Prague, Russia filed its own extradition request to fight the one from the US. There are unconfirmed allegations that Nikulin may have some insights on the 2016 Presidential Elections related hacking. Nikulin is a high-skilled dangerous hacker. While the true nature of his connections to the Russian government is unproven, it is possible that it prompted the legal help that he is getting...READ MORE

Wapack Labs has cataloged and reported extensively on hackers in the past. An archive of related reporting can be found in the Red Sky Alliance portal.

WWW.WAPACKLABS.COM

Yevgeniy Nikulin - LinkedIn, Dropbox and Formspring

Wapack Labs has routinely exposed Russian malicious cyber activity. From the alleged Russian rigging of Ukrainian elections, electrical grid shutdowns and telecommunication manipulation to the recent hacking activity of Fancy Bear - Russia has been at the vortex of numerous cyber-attacks. This activity represents support of the Russian, “Ivanov Doctrine.” The current arrest of Yevgeniy Nikulin in the Czech Republic, who was indicted for the cyber- attacks of Linkedin, Formspring and Dropbox, highlights the gravity of Russian cyber activity. These attacks of big data companies have exposed Personally Identifiable Information (PII) and other breached data to unknown factions. This information is being supplied for your situational awareness.

• The “Ivanov Doctrine-New Generation Warfare,” was introduced in Russia approximately 15 years ago
• Russian cyber-attack activity has escalated in recent years.
• Yevgeniy Nikulin was arrested in the Czech Republic for hacking large U.S. data companies. 

Publication date:                     26 October 2016

Handling requirements:         Traffic light protocol (TLP) GREEN

Attribution/Threat Actors:    Yevgeniy Nikulin

Actor Type:                              Adversary capabilities have been assessed as Tier IV*

Potential Targets:                    U.S. corporations (targeting PII)

Past Reporting:                        Red Sky Alliance: DOC-2183, DOC- 2349, DOC-2543, DOC-4287, Msgs #6498 #8612

* State actors who create vulnerabilities through an active program to “influence” commercial products and services during design, development or manufacturing, or with the ability to impact products while in the supply chain to enable exploitation of networks and systems of interest. 

The full attribution report has been published in its entirety in the Red Sky Alliance portal.  For more information please contact the lab directly at 844-4-WAPACK, 603-606-1246, or feedback@wapacklabs.com.

About Wapack Labs

Wapack Labs, located in New Boston, NH is a Cyber Threat Analysis and Intelligence organization supporting the Red Sky Alliance, the FS-ISAC and individual organizations by offering expert level targeted intelligence analysis answering some of the hardest questions in Cyber.  Wapack Labs’ engineers, researchers and analysts use deep analysis techniques and visualization to design and deliver transformational cyber-security analysis tools that fuse open source and proprietary information.  The intelligence derived from these tools and techniques serve as the foundation of Wapack Labs’ information reporting to the cyber-security teams of its customers and industry partners located around the world.