Russia Tells Google to Stop Spreading Threats against Russians on YouTube

YouTube logo is placed on a Russian flag in this illustration picture taken February 26, 2022. (Reuters)
YouTube logo is placed on a Russian flag in this illustration picture taken February 26, 2022. (Reuters)
TT

Russia Tells Google to Stop Spreading Threats against Russians on YouTube

YouTube logo is placed on a Russian flag in this illustration picture taken February 26, 2022. (Reuters)
YouTube logo is placed on a Russian flag in this illustration picture taken February 26, 2022. (Reuters)

Russia on Friday demanded that Alphabet Inc's Google stop spreading what it called threats against Russian citizens on its YouTube video-sharing platform, a move that could presage an outright block of the service on Russian territory.

Google representatives in Russia did not respond to an emailed request for comment. Google representatives outside Russia also did not immediately respond.

The regulator, Roskomnadzor, said adverts on the platform were calling for the communications systems of Russia and Belarus' railway networks to be suspended and that their dissemination was evidence of the US tech giant's anti-Russian position. It did not say which accounts were publishing the adverts.

"The actions of YouTube's administration are of a terrorist nature and threaten the life and health of Russian citizens," the regulator said.

"Roskomnadzor categorically opposes such advertising campaigns and demands that Google stop broadcasting anti-Russia videos as soon as possible."

It was the latest salvo in a row between Moscow and foreign tech firms over Ukraine.

YouTube, which has blocked Russian state-funded media globally, is under heavy pressure from Russia's communications regulator and politicians.

Outraged that Meta Platforms was allowing social media users in Ukraine to post messages such as "Death to the Russian invaders," Moscow blocked Instagram this week, having already stopped access to Facebook because of what it said were restrictions by the platform on Russian media.

Russian news media including RIA and Sputnik quoted an unnamed source as saying YouTube could be blocked next week or as early as Friday.

Domestic alternatives

Former Russian President Dmitry Medvedev on Friday wrote a fierce criticism of foreign social media firms, mentioning by name both Meta and YouTube, but he hinted that the door leading to their possible return to the Russian market would be left ajar.

"The 'guardians' of free speech have in all seriousness allowed users of their social media to wish death upon the Russian military," Medvedev, who served as president from 2008 to 2012 and is now deputy secretary of Russia's Security Council, wrote on the messaging app Telegram.

Medvedev said Russia has the necessary tools and experience to develop its own social media, saying the "one-way game" of Western firms controlling information flows could not continue.

"In order to return, they will have to prove their independence and good attitude to Russia and its citizens," he wrote. "However, it is not a fact that they will be able to dip their toes in the same water twice."

VKontakte, Russia's answer to Facebook, has been breaking records for activity on its platform since Russia sent troops into Ukraine on Feb. 24.

The site attracted 300,000 new users in the two weeks after Russia began what it calls a special operation to demilitarize and "de-Nazify" its neighbor.

On the day Instagram was blocked in Russia, VKontakte said its daily domestic audience grew by 8.7% to more than 50 million people, a new record.

Anton Gorelkin, a member of Russia's State Duma committee on information and communications, pointed Russians to services that would help them move videos from YouTube to the domestic equivalent, RuTube.

"It's not that I'm calling for everyone to immediately leave YouTube," he said on his Telegram channel. "But, probably, in light of recent events it is worth following the principle of not keeping all your eggs in one basket."

He said earlier this week that YouTube may face the same fate as Instagram if it continues "to act as a weapon in the information war."

Russian tech entrepreneurs said this week they would launch picture-sharing application Rossgram on the domestic market to help fill the void left by Instagram.

In November, Gazprom Media launched Yappy as a domestic rival to video-sharing platform TikTok.



North Korean Charged in Cyberattacks on US Hospitals, NASA and Military Bases

A man who allegedly carried out cybercrimes for a North Korean military intelligence agency has been indicted in a conspiracy to hack hospitals and health care providers in several US states. - The AP
A man who allegedly carried out cybercrimes for a North Korean military intelligence agency has been indicted in a conspiracy to hack hospitals and health care providers in several US states. - The AP
TT

North Korean Charged in Cyberattacks on US Hospitals, NASA and Military Bases

A man who allegedly carried out cybercrimes for a North Korean military intelligence agency has been indicted in a conspiracy to hack hospitals and health care providers in several US states. - The AP
A man who allegedly carried out cybercrimes for a North Korean military intelligence agency has been indicted in a conspiracy to hack hospitals and health care providers in several US states. - The AP

A North Korean military intelligence operative has been indicted in a conspiracy to hack into American health care providers, NASA, US military bases and international entities, stealing sensitive information and installing ransomware to fund more attacks, federal prosecutors announced Thursday.

The indictment of Rim Jong Hyok by a grand jury in Kansas City, Kansas, accuses him of laundering the money through a Chinese bank and then using it to buy computer servers and fund more cyberattacks on defense, technology and government entities around the world.

The hacks on American hospitals and other health care providers disrupted the treatment of patients, officials said. He's accused of targeting 17 entities across 11 US states, including NASA and US military bases, as well as defense and energy companies in China, Taiwan and South Korea, according to The AP.

For more than three months, Rim and other members of the Andariel Unit of North Korea's Reconnaissance General Bureau had access to NASA’s computer system, extracting over 17 gigabytes of unclassified data, the indictment says. They also reached inside computer systems for defense companies in Michigan and California, as well as Randolph Air Force base in Texas and Robins Air Force base in Georgia, authorities say.

The malware enabled the state-sponsored Andariel group to send stolen information to North Korean military intelligence, furthering the country’s military and nuclear aspirations, federal prosecutors said. They've gone after details of fighter aircraft, missile defense systems, satellite communications and radar systems, a senior FBI official said.

“While North Korea uses these types of cyber crimes to circumvent international sanctions and fund its political and military ambitions, the impact of these wanton acts have a direct impact on the citizens of Kansas,” said Stephen A. Cyrus, an FBI agent based in Kansas City.

Online court records do not list an attorney for Rim, who has lived in North Korea and worked at the military intelligence agency’s offices in both Pyongyang and Sinuiju, according to court records. A reward of up to $10 million has been offered for information that could lead to him or other foreign government operatives who target critical US infrastructure.

The Justice Department has prosecuted multiple cases related to North Korean hacking, often alleging a profit-driven motive that sets the nation's cybercriminals apart from hackers in Russia and China. In 2021, for instance, the department charged three North Korean computer programmers in a broad range of hacks including a destructive attack targeting an American movie studio and the attempted theft and extortion of more than $1.3 billion from banks and companies around the world.

In this case, the FBI was alerted by a Kansas medical center that was hit in May 2021. Hackers had encrypted its files and servers, blocking access to patient files, laboratory test results and computers needed to operate hospital equipment. A Colorado health care provider was affected by the same Maui ransomware variant.

A ransom note sent to the Kansas hospital demanded Bitcoin payments valued then at about $100,000, to be sent to a cryptocurrency address.

“Otherwise all of your files will be posted in the Internet which may lead you to loss of reputation and cause the troubles for your business,” the note reads. “Please do not waste your time! You have 48 hours only! After that the Main server will double your price.”

Federal investigators said they traced blockchains to follow the money: An unnamed co-conspirator transferred the Bitcoin to a virtual currency address belonging to two Hong Kong residents before it was converted into Chinese currency and transferred to a Chinese bank. The money was then accessed from an ATM in China next to the Sino-Korean Friendship Bridge connecting China and North Korea, according to court records.

In 2022, the Justice Department said the FBI seized approximately $500,000 in ransom payments from the money laundering accounts, including the entire ransom payment from the hospital.

An arrest of Rim is unlikely, so the biggest outcome of the indictment is that it may lead to sanctions that could cripple the ability of North Korea to collect ransoms this way, which could in turn remove the motivation to conduct cyber attacks on entities like hospitals in the future, according to Allan Liska, an analyst with the cybersecurity firm Recorded Future.

“Now, unfortunately, that will force them to do more cryptocurrency theft. So it’s not going to stop their activity. But the hope is that we won’t have hospitals disrupted by ransomware attacks because they’ll know that they can’t get paid,” Liska said.

He also noted that a Chinese entity was among the victims and questioned what the country, which is an ally of North Korea, thinks of being targeted.

“China can’t be too thrilled about that,” he said.