Jump directly to the content
'RUSSIAN HACK'

Ministry of Defence hit by Russia-linked hackers as security secrets are leaked in data posted online

THE Ministry of Defence has been hit by hackers with links to Russia, as security secrets have been leaked and the data posted online.

Hackers have released thousands of pages of information with could be used by criminals to access the HMNB Clyde nuclear submarine base, the Porton Down chemical weapons lab and a GCHQ listening post.

The Royal Navy’s Trident-class nuclear submarine Vanguard
2
The Royal Navy’s Trident-class nuclear submarine VanguardCredit: s

Information concerning high-security prisons and a military site key to our cyber defences was also stolen in the raid by group LockBit.

Hackers are said to have targeted the databases of Zaun, a firm which makes the fences for maximum security sites.

The information was published on the internet’s dark web, which can be accessed with specialist software.

It’s thought the information was stolen last month during an attack on the firm based in the West Midlands, according to a report by the .

Read More on Cyber Attacks

LockBit is regarded as the world’s most dangerous hacking gang with its keys suspects listed on the FBI’s Most Wanted list.

It’s thought they are responsible for 1,400 attacks on global targets.

The group is also allegedly behind a £66million blackmail attempt on the Royal Mail – with the postal service refusing to cave in to their demands.

A number of Russian nationals have been accused of cyber attacks and held in both the United States and Canada.

LockBit is said to have financial connections to Russian gangsters.

One document which was leaked relates to specific equipment bought to protect Porton Down in Wiltshire.

Zaun describes its work there as “very secretive”.

Another leaked document posted on the dark web is a sales order detailing goods purchased for HMNB Clyde – also known as Faslane – which is home to Trident nuclear subs.

Other documents include a sales order report for equipment at GCHQ’s communications complex in Bude, Cornwall, as well as security equipment at RAF Waddington in Lincolnshire, where the Reaper attack drones squadron is based, and Cawdor Barracks, the base of the 14th Signal Regiment, which deals in electronic warfare.

Detailed drawings for perimeter fencing at Cawdor, in Pembrokeshire, were attached to company emails.

Paperwork relating to a string of jails, including Category A Long Lartin, Worcs, and Whitemoor, Cambridgeshire, was also leaked.

A Government spokesperson told Sun Online: “We do not comment on security matters.”

Conservative MP Tobias Ellwood, chair of the Defence committee, said: “How does this affect the ability of our defence establishments to continue functioning without threat of attack?

“How do we better defend ourselves from Russian-backed interference no doubt related to our stance in supporting Ukraine?"

LockBit has been on the FBI’s radar since 2020 and the cyber hackers are thought to have issued £80m in ransom demands across the world.

Ruslan Magomedovich Astamirov, a Russian national, was charged in the US “for involvement in deploying numerous LockBit ransomware and other attacks in the US, Asia, Europe, and Africa”.

The US Department of Justice said: “LockBit ransomware variant first appeared around January 2020. LockBit actors have executed over 1,400 attacks, issuing over $100million in demands and receiving tens of millions in Bitcoin.”

Charges in the US were brought against Mikhail Vasiliev, a dual Russian and Canadian national in 2022.

He is currently being held in Canada and is awaiting extradition to the US.

Another Russian, Mikhail Pavlovich Matveev, is wanted “for alleged participation” in separate LockBit conspiracies.

Zaun said in a statement: “LockBit will have potentially gained access to some historic emails, orders, drawings and project files.

"We do not believe classified documents were stored on the system or have been compromised.

Read More on The Sun

“The National Cyber Security Centre has been contacted and we are taking advice.

"Zaun is a victim of a sophisticated cyber attack and has taken all reasonable measures to mitigate any attack on our systems.”

Tobias Ellwood says the attack shows that conflict is no longer limited to the battlefield
2
Tobias Ellwood says the attack shows that conflict is no longer limited to the battlefieldCredit: PA
Topics