HACKING OF WESTINGHOUSE

REUTERS - The United States on Thursday charged seven Russian intelligence officers with conspiring to hack computers and steal data from the nuclear energy company Westinghouse Electric Co as well as anti-doping watchdogs, sporting federations and an international agency probing the use of chemical weapons.

The charges of conspiracy to commit computer fraud and abuse and to commit wire fraud and money laundering came hours after Dutch authorities said they had disrupted an attempt by Russian intelligence agents to hack into the Hague-based Organization for the Prohibition of Chemical Weapons in April.

That organisation is tasked with probing the use of chemical weapons in Syria and the March 2018 poisoning of a former Russian military intelligence officer in the United Kingdom.

The Justice Department said one of the Russian officers researched Westinghouse and its employees online and stole log-in credentials of Westinghouse workers for servers in the United States, including staff that work at its advanced nuclear reactor development and new reactor technology units.

Westinghouse, which is located outside Pittsburgh, provides fuel, services and nuclear power plant design to customers, including Ukraine.

"We have found no evidence that the phishing campaigns against employees to breach Westinghouse's systems were successful," the company said in a statement.

It added that it is cooperating with the Justice Department, but could not go into specifics because the investigation is ongoing.

Three of the seven Russian military officers indicted on Thursday were charged in a separate case brought by Special Counsel Robert Mueller's office for their role in hacking activities designed to influence the 2016 presidential election.

John Demers, the head of the Justice Department's National Security Division, said while the defendants overlap, the case brought on Thursday did not involve Mueller's office.

In the indictment, prosecutors alleged that one of the Russian officers, Ivan Sergeyevich Yermakov, who was also charged by Mueller in the election-related hacking, performed "technical reconnaissance" on Westinghouse to gain access to IP addresses, domains and network ports starting in November 2014.

In December 2014, the hackers registered a fake domain and website designed to mimic the company's website and sent phishing emails to at least five employees. Once people clicked on the spoofed domain and provided their log-ins, they were rerouted to the original network.

On other occasions, according to the indictment, the conspirators also sent spear-phishing emails to the personal emails of employees at Westinghouse. Two account users clicked on the malicious links.

The indictment alleges that the seven defendants, all of whom are members of Russia's military intelligence agency, sought to sow disinformation and create an influence campaign as retaliation for the exposure of a Russian state-sponsored athlete doping programme.

The U.S. Anti-Doping Agency and the World Anti-Doping Agency were among their hacking targets, as well sporting organizations including the Federation Internationle de Football Association (FIFA) and athletes whose medical records were stolen and later publicized.

Russia has denied meddling in the 2016 U.S. presidential election, contradicting a unanimous conclusion by U.S. intelligence agencies.

All seven of the defendants are presumed to be in Russia, which does not have an extradition treaty with the United States. The indictment could make it hard for them to travel to other countries.

The hackers travelled to other countries to carry out hacking activities, sometimes with the use of diplomatic passports, prosecutors allege.

Such efforts, known as "on-site" or "close access" hacking operations, were carried out in cases where remote hacking from Russia did not provide "sufficient access" to networks.

One such trip, for instance, was Rio de Janeiro before and during the 2016 summer Olympic games.

Some of the stolen data was later published under the false auspices of a hacktivist group known as "Fancy Bears Hack Team."

"Close access operations, like the ones exposed today, are reminders of the considerable resources available to nation states," said John Hultquist, director of intelligence analysis at the cyber firm FireEye.

While the motive behind the hacks involving anti-doping groups and organizations probing Russian poisonings were more clear-cut, the decision to target Westinghouse was less apparent.

Justice Department officials declined to provide additional details on Thursday about the attacks on the company.

Efforts to penetrate its networks started in late 2014, some nine months after Ukraine's pro-Russia President Viktor Yanukovych was removed from power during the Ukrainian Revolution.

This is not the first time Westinghouse has been a victim of a state-sponsored hack.

In May 2014, the Justice Department indicted five Chinese military hackers who targeted U.S.-based nuclear power, metals and solar sectors.

According to that indictment, Westinghouse had entered into a deal with a Chinese nuclear company to construct and run four nuclear power plants in China.

But during the talks, prosecutors say one of the defendants stole proprietary and confidential technical designs and other data from Westinghouse.

-----

Earlier:

2018, September, 10, 12:15:00 WESTINGHOUSE NEED INNOVATION WNN - Westinghouse Electric Company is starting the next phase in its long history with one key message: The nuclear industry, which has always provided safe, clean and reliable energy, needs innovation now more than ever before.

2018, August, 3, 09:05:00 BROOKFIELD BOUGHT WESTINGHOUSE: $4.6 BLN WNN - it was announced that Brookfield Business Partners, together with institutional partners - collectively known as Brookfield - had agreed to acquire 100% of Westinghouse from Toshiba for about USD4.6 billion.

2018, April, 9, 11:05:00 TOSHIBA SELLS WESTINGHOUSE WNN - WNN - Japan's Toshiba announced today that it has completed the sale to Brookfield of its shareholding in Toshiba Nuclear Energy Holdings (US) Inc - the indirect holding company of Westinghouse Electric Company. The sale is independent of Brookfield's acquisition of Westinghouse and some of its affiliates.

2018, March, 30, 11:15:00 WESTINGHOUSE REORGANISATION WNN - Westinghouse Electric Company's reorganisation plan - including its sale to Brookfield - has been approved by the US Bankruptcy Court. Westinghouse said the court's approval of the plan is a "significant milestone in the company's strategic restructuring".

2018, March, 14, 11:10:00 NUCLEAR FUEL FOR EUROPE WNN - A consortium led by Westinghouse Electric Company has completed an EU-funded project aimed at diversifying the supply of fuel to Russian-built VVER-440 reactors in Europe.

2018, January, 19, 12:05:00 TOSHIBA SELLS WESTINGHOUSE WNN - Under the terms of the assignment and purchase agreement it has signed with Nucleus and Brookfield, Toshiba will sell its rights to assert claims against Westinghouse related to the parent guarantees in the amount of $5.788 billion, and on account of other claims Toshiba holds against Westinghouse in the amount of $2.284 billion to Nucleus, for the sale price of $2.160 billion.

2018, January, 5, 23:30:00 BROOKFIELD BUYS WESTINGHOUSE: $4.6 BLN WNN - Brookfield highlighted Westinghouse's "strong market position" as the "largest service provider" to the world's nuclear facilities; its well-established global base of long-term customers; its "attractive" revenue and cash flow profile, with regularly scheduled services provided under long-term contracts; and its "strong reputation", driven by focus on innovation.