FBI’s team to investigate massive cyberattack in Montenegro

Aug 31, 2022, 5:39 AM | Updated: Sep 1, 2022, 1:46 am

PODGORICA, Montenegro (AP) — A rapid deployment team of FBI cyber experts is heading to Montenegro to investigate a massive, coordinated attack on the tiny Balkan nation’s government and its services, the country’s Ministry of Internal Affairs announced Wednesday.

The announcement came as the government’s main websites — including the ministries of defense, finance and interior — remained unreachable. Officials said they were offline “for security reasons.”

The ministry called the FBI assistance “another confirmation of the excellent cooperation between the United States of America and Montenegro and a proof that we can count on their support in any situation.”

Montenegro’s Agency for National Security blamed the attack, which began late last week, squarely on Russia, though without providing evidence. A combination of ransomware and distributed denial-of-service attacks, the onslaught disrupted government services and prompted the country’s electrical utility to switch to manual control.

A cybercriminal extortion gang claimed responsibility for at least part of the attack, infecting a parliamentary office with ransomware known as Cuba, which the cybersecurity firm Profero has found to include Russian speakers. Russian-speaking cybercriminals generally operate without Kremlin interference, as long as they don’t target friendly nations.

Officials said no ransom demand has been made.

Montenegrin officials said Russia has a strong motive for such an attack because the Balkan state, once considered a strong Russian ally, joined NATO in 2017 despite strong opposition from the Kremlin. It has also joined Western sanctions against Moscow because of its invasion of Ukraine in February.

On Friday, the U.S. Embassy in Podgorica issued a rare alert saying the attack could include “disruptions to the public utility, transportation (including border crossings and airport), and telecommunication sectors.”

Other Eastern European states deemed enemies of Russia have recently also sustained cyberattacks, mostly nuisance-level denial-of-service campaigns, which render websites unreachable by flooding them with junk data but don’t damage data. Targets have included networks in Moldova, Slovenia, Bulgaria and Albania.

But the attack against Montenegro’s infrastructure seemed more sustained and extensive, with targets including water supply systems, transportation services and online government services, among many others.

Government officials in the country of just over 600,000 people said certain government services remained temporarily disabled for security reasons and that the data of citizens and businesses were not endangered.

The Director of the Directorate for Information Security, Dusan Polovic, said 150 computers were infected with malware at a dozen state institutions and that the data of the Ministry of Public Administration was not permanently damaged. Polovic said some retail tax collection was affected.

“The infected stations have been removed from the network and hard drives have been removed from them for further forensics,” he said.

“A huge amount of money was invested in the attack on our system,” said Minister of Public Administration Maras Dukaj. He added that his ministry cannot determine the source of the attack, but there is “strong indication that it is coming from Russia.”

The U.S. military’s Cyber Command has recently worked with the Montenegrins, helping to bolster their cyber defenses. It sent a team to work with them to counteract foreign aggression ahead of the 2020 election.

___

AP writer Dusan Stojanovic contributed from Belgrade, Serbia.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

(Facebook Photo/City of San Luis, Arizona)...
Associated Press

San Luis authorities receive complaints about 911 calls going across border

Authorities in San Luis say they are receiving more complaints about 911 calls mistakenly going across the border.
6 days ago
(Pexels Photo)...
Associated Press

Daylight saving time begins in most of US this weekend

No time change is observed in Hawaii, most of Arizona, Puerto Rico, the U.S. Virgin Islands, American Samoa, Guam and the Northern Marianas.
14 days ago
Mexican army soldiers prepare a search mission for four U.S. citizens kidnapped by gunmen in Matamo...
Associated Press

How the 4 abducted Americans in Mexico were located

The anonymous tip that led Mexican authorities to a remote shack where four abducted Americans were held described armed men and blindfolds.
14 days ago
Tom Brundy points to a newly built irrigation canal on one of the fields at his farm Tuesday, Feb. ...
Associated Press

Southwest farmers reluctant to idle farmland to save water

There is a growing sense that fallowing will have to be part of the solution to the increasingly desperate drought in the West.
21 days ago
A young bison calf stands in a pond with its herd at Bull Hollow, Okla., on Sept. 27, 2022. The cal...
Associated Press

US aims to restore bison herds to Native American lands after near extinction

U.S. officials will work to restore more large bison herds to Native American lands under a Friday order from Interior Secretary Deb Haaland.
21 days ago
Children play in a dried riverbed in Flassans-sur-Issole, southern France, Wednesday, March 1, 2023...
Associated Press

Italy, France confront 2nd year of western Europe drought

ROME (AP) — Bracing for Italy’s second consecutive year of drought for the first time in decades, Premier Giorgia Meloni huddled with ministers Wednesday to start mapping out an action plan Wednesday, joining France and other nations in western Europe grappling with scant winter rain and snow. Meloni and her ministers decided to appoint an […]
23 days ago

Sponsored Articles

(Photo: OCD & Anxiety Treatment Center)...

Here’s what you need to know about OCD and where to find help

It's fair to say that most people know what obsessive-compulsive spectrum disorders generally are, but there's a lot more information than meets the eye about a mental health diagnosis that affects about one in every 100 adults in the United States.
...
Day & Night Air Conditioning, Heating and Plumbing

Company looking for oldest air conditioner and wants to reward homeowner with new one

Does your air conditioner make weird noises or a burning smell when it starts? If so, you may be due for an AC unit replacement.
(Photo via MLB's Arizona Fall League / Twitter)...
Arizona Fall League

Top prospects to watch at this year’s Arizona Fall League

One of the most exciting elements of the MLB offseason is the Arizona Fall League, which began its 30th season Monday.
FBI’s team to investigate massive cyberattack in Montenegro