Positive Technologies denies involvement in SolarWinds attack

Privacy
(Image credit: Shutterstock / Valery Brozhinsky)

Responding to sanctions imposed by the US government, Russia-headquartered cybersecurity company Positive Technologies (PT) has denied any wrongdoing, and dismissed the claims as “groundless accusation”. 

Last week, the US Department of the Treasury imposed sanctions on several Russian technology firms, including PT, accusing them of helping Russian state actors to conduct cyberattacks against the West. 

Specifically, the Treasury accused Russian Intelligence Services -  the FSB, GRU and SVR - of having collaborated to execute the now infamous SolarWinds hack.

TechRadar needs yo...

We're looking at how our readers use VPN for a forthcoming in-depth report. We'd love to hear your thoughts in the survey below. It won't take more than 60 seconds of your time.

>> <a href="https://project.tolunastart.com/s/r9AXk4" data-link-merchant="project.tolunastart.com"" target="_blank">Click here to start the survey in a new window<<

“As a company, we deny the groundless accusations made by the US Department of the Treasury….Our global mission is to create products and technologies to improve cybersecurity around the world and to ensure conditions for the most efficient prevention of cyberattacks for the benefit of society, business, and government agencies,” said Positive Technologies in a statement.

Collaborating with FSB

The US government further alleged that the FSB “cultivates and co-opts criminal hackers” with the help of the now-sanctioned companies, including PT.

While PT assures that it is only involved in white-hat ethical security research, in a report based on "previously unreported US intelligence assessments" MIT Technology Review alleges that PT "develops and sells weaponized software exploits to the Russian government." 

While neither the Treasury Department nor MIT report cite any proof, there is plenty of evidence of PT’s ethical hacking initiatives. 

In fact, in the same week the US imposed its sanctions, PT uncovered a vulnerability in the VMware endpoint protection platform, which was responsibly disclosed to the virtualization giant and consequently patched.  

It isn’t immediately clear how the sanctions will impact ongoing security research at PT, with sanctions putting a stop to such collaborations going forward.

PT didn’t immediately respond to TechRadar Pro’s request for clarification on its future work involving US-based companies and software.

Via The Register

Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.