Save this content for laterSave this content on your device for later, even while offline Sign in with FacebookSign in with your Facebook account Close

Russian spies hacked the Olympics and tried to make it look like North Korea did it, U.S. officials say

By: Ellen Nakashima, The Washington Post
February 24, 2018 Updated: February 24, 2018 at 7:45 pm
0
Caption +
The PyeongChang 2018 Winter Olympics opened with a dazzling ceremony Feb. 9. (Pawel Kopczynski/Reuters)

Russian military spies hacked several hundred computers used by authorities at the 2018 Winter Olympic Games in South Korea, according to U.S. intelligence.

They did so while trying to make it appear as though the intrusion was conducted by North Korea, what is known as a “false-flag” operation, said two U.S. officials who spoke on the condition of anonymity to discuss a sensitive matter.

Officials in PyeongChang acknowledged that the Games were hit by a cyberattack during the Feb. 9 Opening Ceremonies but had refused to confirm whether Russia was responsible. That evening there were disruptions to the Internet, broadcast systems and the Olympics website. Many attendees were unable to print their tickets for the ceremony, resulting in empty seats.

Analysts surmise the disruption was retaliation against the International Olympic Committee for banning the Russian team from the Winter Games due to doping violations. No officials from Russia’s Olympic federation were allowed to attend, and while some athletes were permitted to compete under the designation “Olympic Athletes from Russia,” they were unable to display the Russian flag on their uniforms and, if they won medals, their country’s anthem was not played.

As of early February, the Russian military agency GRU had access to as many as 300 Olympic-related computers, according to an intelligence report this month.

The Office of the Director of National Intelligence declined to comment.

The intelligence, which has not been publicly affirmed, is consistent with reports from private-sector analysts who have said they saw signs Russia had targeted the 2018 Olympics. It also would continue a pattern of such attempts, including during the 2016 Summer Games in Rio de Janeiro.

Some U.S. officials are concerned the Russians may try to disrupt the Closing Ceremonies on Sunday. “We’re watching it pretty closely,” said one. “It’s essentially a Korean problem,” the official added. “We will help the Koreans as requested.”

Apart from accessing the computers, GRU cyber-operators also hacked routers in South Korea last month and deployed new malware on the day the Olympics began, according to Western intelligence agencies. Such access could enable intelligence collection or network attacks, officials said.

It is not clear whether the disruptions during the Opening Ceremonies were the result of that access, but the development is concerning regardless, information security experts said.

“Anyone who controls a router would be able to redirect traffic for one or more selected targets or cause total disruption in the network by stopping the routing entirely,” said Jake Williams, a former National Security Agency cyber-operator and co-founder of Rendition Infosec, a cybersecurity firm.

“Development of router malware is extremely costly, and Russia would likely use it only in locations where it contributes to accomplishing a high-value goal,” said Williams.

The GRU hackers are thought to work for the agency’s Main Center for Special Technology, or GTsST, according to intelligence agencies. That unit has been highly active in information warfare against the West and was behind the NotPetya cyberattack that crippled computers in Ukraine last year.

Two years ago, the GRU penetrated a database containing drug test results and confidential medical data, and posted information about noteworthy U.S. athletes including tennis stars Serena and Venus Williams, four-time gymnastics gold medalist Simone Biles and women’s basketball standout Elena Delle Donne.

That action was widely seen as payback after nearly every member of Russia’s track and field team was banned from the 2016 Olympics. Numerous investigations uncovered a widespread, government-run doping scheme that dated back years.

Russia has a long history of undertaking such “active measures” against the Olympic Games, noted Thomas Rid, a professor of strategic studies at Johns Hopkins University. During the 1984 Olympics in Los Angeles, Soviet intelligence released fake Ku Klux Klan leaflets threatening violence against African athletes as part of an effort to embarrass the United States, he said. That year, the Soviets led a 14-nation boycott of the Games in retaliation for a U.S. boycott of the 1980 Summer Games in Moscow, which was prompted by the Soviets’ 1979 invasion of Afghanistan.

Read the full story at The Washington Post.

Register to the Colorado Springs Gazette
Incognito Mode Your browser is in Incognito mode

You vanished!

We welcome you to read all of our stories by signing into your account. If you don't have a subscription, please subscribe today for daily award winning journalism.

Register to the Colorado Springs Gazette
Subscribe to the Colorado Springs Gazette

It appears that you value local journalism. Thank you.

Subscribe today for unlimited digital access with 50% fewer ads for a faster browsing experience.

Already a Subscriber? LOGIN HERE

Wake up with today's top stories in your inbox

Wake up with today's top stories in your inbox

or
Already a print subscriber?
Already a digital subscriber?
 
This is your last FREE article for the month
This is your last FREE article for the month

Subscribe now and enjoy Unlimited Digital Access to Gazette.com

Only 99 cents for Unlimited Digital Access for 1 month
Then $2.31/week, billed monthly, cancel anytime
Already a print subscriber?
Already a digital subscriber?

 
You have reached your article limit for the month
You have reached your article limit for the month

We hope that you've enjoyed your complimentary access to Gazette.com

Only 99 cents for Unlimited Digital Access for 1 month
Then $2.31/week, billed monthly, cancel anytime
Already a print subscriber?
Already a digital subscriber?
 

Exclusive Subscriber Content

You read The Gazette because you care about your community and the local stories you can't find anywhere else.

Only 99 cents for Unlimited Digital Access for 1 month
Then $2.31/week, billed monthly, cancel anytime
Already a print subscriber? Get Access | Already a digital subscriber? Log In
 
articles remaining
×
Thank you for your interest in local journalism.
Gain unlimited access, 50% fewer ads and a faster browsing experience.