【Bad Detective: Food Chain [Uncut]】

The Bad Detective: Food Chain [Uncut]U.S. Department of Justice plays the long game.

That much was made clear Monday as the DOJ announced charges against six Russian military officers accused of launching a string of damaging cyberattacks dating back to 2015. The men, all members of the Russian Main Intelligence Directorate (GRU), are allegedly behind the notoriously destructive NotPetya and Olympic Destroyer malware (among others).

NotPetya, disguised as ransomware, is a type of malware that appeared to intentionally damage victims' computer systems. Unlike typical ransomware, which encrypts users' files and demands payment to unlock them, NotPetya seemed designed to destroy what it touched. The Olympic Destroyer malware, for its part, targeted the 2018 Winter Olympics, and security experts at the time described its goal as one of "embarrassment."

---

You May Also Like

---

---

Like the famed WannaCry ransomware, NotPetya employed a leaked NSA exploit known as EternalBlue to power its spread.

Monday's press release and corresponding unsealed indictment lay out the vast scale of the operation which began around November of 2015.

These GRU hackers and their co-conspirators engaged in computer intrusions and attacks intended to support Russian government efforts to undermine, retaliate against, or otherwise destabilize: (1) Ukraine; (2) Georgia; (3) elections in France; (4) efforts to hold Russia accountable for its use of a weapons-grade nerve agent, Novichok, on foreign soil; and (5) the 2018 PyeongChang Winter Olympic Games after Russian athletes were banned from participating under their nation's flag, as a consequence of Russian government-sponsored doping effort.

The DOJ alleges that, in addition to the above-listed victims, the NotPetya malware disrupted hospital systems in the U.S. One such victim, cited in the press release, is Western Pennsylvania's Heritage Valley health care system. The malware reportedly "caused the unavailability of patient lists, patient history, physical examination files, and laboratory records" as well as prevented access to "mission-critical computer systems (such as those relating to cardiology, nuclear medicine, radiology, and surgery) for approximately one week[.]"

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

This tangible impact on real people's health was on top of the close to $1 billion in financial damages allegedly suffered by the Heritage Valley Health System, a FedEx Corporation subsidiary, and an unnamed "large U.S. pharmaceutical manufacturer."

A third strain of malware, KillDisk, was allegedly designed by one of the indicted Russian hackers. It would, in addition to destroying computer files, draw an image of the mask from the show Mr. Roboton victims' computer screens.

This is the real image, contained in the indictment, that would show up on some victims' computers. Credit: screenshot / doj unsealed indictment

"[Pavel Valeryevich Frolov] designed the malware to draw the image in real time on the infected computer's screen," reads the unsealed indictment.

In addition to leaving a pop culture calling card, KillDisk was intended to "delete computer event logs and other files and reboot the infected computers," explains the indictment. "Once rebooted, the infected computers were inoperable."

Alleged GRU hackers. Credit: Doj

The six men, ranging in age from 27 to 35, are charged with "conspiracy to conduct computer fraud and abuse, conspiracy to commit wire fraud, wire fraud, damaging protected computers, and aggravated identity theft."

These guys, too. Credit: doj

Notably, tech giants played a role in getting to the bottom of the attacks. The press release specifically thanks Google, Cisco, Facebook, and Twitter for "the assistance they provided in this investigation."

And two more. Credit: doj

While if convicted the six men would face potentially decades in prison, they are not currently in custody. As of Monday, they were all listed on the FBI's most wanted cybercriminals list.

Topics Cybersecurity

• Shopping
• Games
• Entertainment
• Deals
• Life
• Science
• Social Good
• Digital Culture

• Reality Distortion Field: 10 Things Apple Won't Directly Say But We'll Infer About the iPhone X
• The Victorian Ghost Stories of Vernon Lee
• Winner of the American Book Award by Dan Piepenbring
• The Morning News Roundup for December 9, 2014
• NYT Strands hints, answers for May 2
• The Ballad of Ferguson, Missouri
• The Poet Bandit
• The Morning News Roundup for December 4, 2014
• Shop the Google Pixel Pro 9 for $200 off at Amazon
• Notes on Oxford Dictionaries’ Word of the Year

• Amazon celebrates Echo's 2nd birthday with $40 price cut
• If you're getting your first PlayStation, wait for a PS4 Pro
• 'Saturday Night Live' shows Donald Trump getting intimate with KKK, FBI and Putin
• The first 'Valerian' trailer docks in 3 days, and we got a sneak peek
• Bogus apps are targeting holiday shoppers on the iOS App Store
• Remembering Ronald Reagan, the Charmer
• Lady Gaga channels the suffragette movement in election
• Victim of tragic Kit Kat theft gets car full of candy bars
• Dude who took selfies in the middle of a forest fire gets scolded AF
• 'Silicon Valley' star shuts down BlizzCon haters in one Instagram

• Get the official Atari 7800+ Console for 50% off
• Douglas Coupland on Marshall McLuhan by James Atlas
• Once Upon a Potty
• Rilke and the Lions
• Outdoor speaker deal: Save $20 on the Soundcore Boom 2
• The Morning News Roundup for November 25, 2014
• Cover Model
• On This Day, William Tell Shot an Apple Off His Son’s Head
• The State of PC Gaming in 2016
• Sleep of the Just by Sadie Stein

• Amazon Pet Day: All the best deals
• The Morning News Roundup for November 12, 2014
• This Week on the Daily by Dan Piepenbring
• The Morning News Roundup for November 13, 2014
• Best roborock deal: Save $400 on Q5 Pro+ Robot Vacuum and Mop
• Overheard Haiku
• Annotations by Paul Muldoon
• The Marquis de Sade at 200
• Japan orders Google to stop alleged antitrust violations
• “Dubliners at One Hundred”