The Washington Post recently highlighted contracts between the Russian Company NTC Vulkan and the Russian Ministry of Defense. This public intelligence brief outlines the threats to critical infrastructure described in those documents. The Russian cyber program Amesit is a broad and wide-ranging program executed over several years with multiple sub-components and contractors. It is well documented that this cyber program includes intelligence organizations, private firms, and co-opted criminals who often work alongside government computer network operations (CNO) entities.
While we are missing the initial government Terms of Reference (TOR) that outlines what the government specified Amesit must be able to do, we can infer based on the Amesit-B testing and concept design documents what it is. Amesit-B, in Western terms, is an offensive computer network operations platform that includes signals intelligence (SIGINT), electronic warfare (EW), and malign influence capabilities.
Download this brief to learn how Russian programs are threatening critical infrastructure.
Interested in learning more? Request a demo from Dragos here.