Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

Russian submarine agency hacked, attackers allegedly Chinese backed

Russian submarine design agency, the Rubin Design Bureau, has allegedly been compromised by Chinese cyber attackers.

user iconReporter
Wed, 12 May 2021
Russian submarine agency hacked, attackers allegedly Chinese backed
expand image

The Russian submarine design agency, the Rubin Design Bureau, has allegedly been breached with malware with similar characteristics to typical Chinese malware via a spear phishing email.

The cyber attack was initially reported by cyber security company Cybereason, using the PortDoor malware delivered via a RoyalRoad injection service.

“APT Group Operating on Behalf of Chinese State Interests: The accumulated evidence such as the infection vector, social engineering style, use of RoyalRoad against similar targets, and other similarities between the newly discovered backdoor sample and other known Chinese APT malware all bear the hallmarks of a threat actor operating on behalf of Chinese state-sponsored interests," Cybereason reported.

The company further reported that the target of the attack was a general director within the design agency, Igor Vladimirovich. The Rubin Design Bureau is one of Russia's largest submarine design agencies.

Rubin recently unveiled a new patrol vessel that is able to dive below sea level in order to operate as a submarine, as well as the unmanned "Poseidon" submarine vessel that can carry nuclear torpedoes. It is not suggested that the hack has any link to recent Rubin advancements.

According to Cybereason, the spear phishing email with the malware was allegedly addressed to "respectful general director Igor Vladimirovich” with a malicious attachment which deposited the "winlog.wll" payload.

[Related: Cyber attack shuts down largest oil pipeline in US, state of emergency declared]

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.