US announces more sanctions over Russian hacking

The Treasury Department takes aim at companies and people who have helped with cyberattacks coming out of Russia.

Alfred Ng Senior Reporter / CNET News
Alfred Ng was a senior reporter for CNET News. He was raised in Brooklyn and previously worked on the New York Daily News's social media and breaking news teams.
Alfred Ng
2 min read

The sanctions apply to five companies and three Russians.

James Martin/CNET

The US has imposed another round of sanctions over Russian hacking. 

The Treasury Department announced sanctions against five companies and three people on Monday, saying they'd helped develop many of the hacks coming out of Russia. 

The US is reacting to Russia-based cyberattacks, including the VPNFilter malware that infected more than half a million routers worldwide this year. Russian hacks have been tied to power outages in Ukraine and a ransomware attack that the US government called the "most destructive cyberattack in history." Hacks in the runup to the US presidential election in 2016 are also linked to Russia

Monday's sanctions take aim at cybersecurity companies and the people behind them for allegedly helping the Russian government develop hacking efforts.

"The entities designated today have directly contributed to improving Russia's cyber and underwater capabilities through their work with the FSB and therefore jeopardize the safety and security of the United States and our allies," Treasury Secretary Steven Mnuchin said in a statement. "Underwater" refers to Russian efforts to track undersea telecommunications cables.

The FSB, or Russia's Federal Security Service, is the successor to the KGB and is believed to carry out many of the government's cyberattacks. The FSB itself was sanctioned by the Treasury Department in 2016 and again earlier this year for cyberattacks.

The new sanctions block property under US jurisdiction belonging to the five companies and three people and also prevent them from making any transactions with "US persons."

The Treasury Department is sanctioning Digital Security, ERPScan and Embedi, three cybersecurity companies. While the latter two are not based in Russia, the department said they're owned by Russia-based Digital Security, which worked on a project to help Russia's hacking efforts. 

Alex Kruglov, Embedi's head of marketing, said he's unsure why the company was added to the US' sanctions against Russia. 

"We never worked with Russian government and any government at all," Kruglov said in an email. He said the company isn't clear on what they'll do in their next steps.

ERPScan didn't respond to a request for comment.

The two other Russia-based companies are Kvant Scientific Research Institute and Divetechnoservices. The latter provides underwater equipment and diving systems to Russian agencies. The three Russians charged -- Aleksandr Lvovich Tribun, Oleg Sergeyevich Chirikov and Vladimir Yakovlevich Kaganskiy -- have all worked for Divetechnoservices.

First published June 11, 8:39 a.m. PT.
Update, 12:45 p.m. PT: To include a response from Embedi.

'Hello, humans': Google's Duplex could make Assistant the most lifelike AI yet.

Cambridge Analytica: Everything you need to know about Facebook's data mining scandal.