hackslash dot org

Jamming: Polish researchers suspect GPS jammers on ships in the Baltic Sea

Posted: 2025-03-05 14:03:06

Polish researchers suspect that GPS jamming in the Baltic Sea, affecting maritime and air navigation, is being deliberately caused by ships, possibly linked to the ongoing war in Ukraine. The Centre for Eastern Studies (OSW) report highlights numerous incidents of interference, particularly near Russian naval exercises and around strategic areas like the Bornholm Basin, suggesting a potential Russian military strategy to disrupt navigation and create uncertainty. While technical malfunctions are possible, the patterns of interference strongly point toward intentional jamming, impacting both civilian and military operations in the region.

In a concerning development for maritime navigation and regional security, Polish researchers from the Space Research Centre of the Polish Academy of Sciences (CBK PAN) have posited that deliberate GPS jamming is occurring in the Baltic Sea, potentially originating from vessels operating in the area. This disruption of the Global Positioning System, a critical infrastructure component for modern shipping and other navigational activities, is believed to be emanating from ships, although the precise actors responsible and their motivations remain unclear. The researchers' suspicions stem from a detailed analysis of data collected from receivers onboard multiple satellites, including Sentinel-1, which revealed significant anomalies and inconsistencies in GPS signals within the Baltic Sea region. These irregularities were specifically localized near maritime traffic, strengthening the theory of ship-borne jamming devices.

The CBK PAN's findings paint a picture of intentional interference rather than accidental disruption. The researchers observed patterns of interference consistent with the deliberate use of GPS jamming technology, as opposed to unintentional interference from other electronic equipment. The specific nature of these patterns has not been publicly disclosed, likely for security reasons and to avoid providing information that could be exploited by malicious actors. However, their presence and correlation with ship movements strongly indicate intentional jamming activities.

This potential GPS manipulation raises a multitude of concerns. Accurate and reliable GPS signals are paramount for safe navigation, especially in busy shipping lanes such as those in the Baltic Sea. Interference with these signals can lead to navigational errors, increasing the risk of collisions, groundings, and other maritime accidents. Moreover, the implications extend beyond navigational safety. GPS disruption can also impact a variety of other systems reliant on precise timing and location data, including communication networks, financial transactions, and emergency services. Furthermore, in a region with heightened geopolitical tensions like the Baltic Sea, such interference could be indicative of deliberate attempts to disrupt commercial activity, military operations, or both, raising the specter of electronic warfare and escalating regional instability. The research conducted by the CBK PAN highlights the vulnerability of critical infrastructure to electronic interference and underscores the need for enhanced monitoring and mitigation strategies to safeguard against these threats. While the identities and motivations of the suspected jamming actors remain shrouded in mystery, the CBK PAN’s observations underscore the potential for GPS jamming to be employed as a disruptive tactic in an increasingly complex geopolitical environment. Further investigation is urgently needed to identify the responsible parties and address the potential security implications of this activity.

Summary of Comments ( 10 )
https://news.ycombinator.com/item?id=43266494

Several Hacker News commenters discuss the plausibility and implications of GPS jamming in the Baltic Sea. Some express skepticism, suggesting the observed disruptions could be caused by unintentional interference or even solar flares. Others point out the increasing availability and use of GPS jammers, highlighting their potential use in smuggling or other illicit activities. The prevalence of spoofing is also raised, with one commenter mentioning the known use of GPS spoofing by Russia around airports and other strategic locations. Another commenter questions the motivation behind such jamming, speculating that it could be related to the ongoing war in Ukraine, possibly to mask ship movements or disrupt navigation. A few comments also touch on the broader implications for maritime safety and the potential for escalating tensions in the region.

The Hacker News post titled "Jamming: Polish researchers suspect GPS jammers on ships in the Baltic Sea" has generated a moderate number of comments discussing various aspects of GPS jamming and its implications.

Several commenters delve into the technicalities of GPS jamming, explaining that it's relatively easy and inexpensive to accomplish. One commenter highlights the prevalence of cheap GPS jammers on platforms like AliExpress and notes their potential use by truck drivers seeking to avoid tracking or manipulate electronic logging devices. This comment sparks further discussion about the legality and ethical implications of such devices.

The conversation also touches upon the difficulty of pinpointing the source of GPS jamming. Commenters explain how the nature of radio waves makes it challenging to trace the origin, especially in maritime environments. One commenter proposes using a network of receivers and multilateration techniques to improve detection and localization of jamming sources. Another points out the possibility of sophisticated jamming techniques that could further complicate attribution.

Some commenters speculate about the potential motives behind the suspected jamming incidents in the Baltic Sea. While some suggest the possibility of Russian involvement given the ongoing geopolitical tensions, others caution against jumping to conclusions without concrete evidence. The discussion acknowledges the strategic importance of the Baltic Sea and the potential for various actors to utilize GPS jamming for different purposes.

A few commenters also discuss the broader implications of GPS jamming for critical infrastructure and national security. They highlight the reliance of various systems, including aviation, maritime navigation, and financial transactions, on accurate GPS signals. The comments emphasize the potential for widespread disruption and the need for robust countermeasures against GPS jamming.

Finally, some comments focus on the legal and regulatory aspects of GPS jamming. They mention existing regulations that prohibit the use of such devices and discuss the challenges of enforcing these regulations. The conversation also touches on the need for international cooperation to address the growing threat of GPS jamming.

Multiple Russia-aligned threat actors actively targeting Signal Messenger

permalink

Posted: 2025-02-19 14:05:23

Google's Threat Analysis Group (TAG) observed multiple Russia-aligned threat actors, including APT29 (Cozy Bear) and Sandworm, actively targeting Signal users. These campaigns primarily focused on stealing authentication material from Signal servers, likely to bypass Signal's robust encryption and gain access to user communications. Although Signal's server-side infrastructure was targeted, the attackers needed physical access to the device to complete the compromise, significantly limiting the attack's effectiveness. While Signal's encryption remains unbroken, the targeting underscores the lengths to which nation-state actors will go to compromise secure communications.

In a comprehensive blog post titled "Multiple Russia-aligned threat actors actively targeting Signal Messenger," Google's Threat Analysis Group (TAG) details a concerted campaign by several Russian state-sponsored Advanced Persistent Threat (APT) groups to compromise the secure messaging platform Signal. These malicious activities, predominantly observed throughout 2022, focused on exploiting vulnerabilities and employing sophisticated tactics to gain access to user data and communications.

The primary target of these attacks appears to be individuals associated with Ukrainian government entities and media organizations, highlighting the geopolitical context of this digital offensive. While Signal itself was not directly breached, the threat actors concentrated their efforts on exploiting device vulnerabilities and compromising specific user accounts. This suggests a targeted approach rather than a widespread attack on the platform's infrastructure or encryption protocols.

The blog post meticulously outlines the tactics, techniques, and procedures (TTPs) employed by these APT groups, including leveraging zero-day vulnerabilities in operating systems and utilizing custom-developed malware. One such instance involves the exploitation of a zero-day vulnerability within the Samsung mobile operating system to deliver malicious payloads. Another notable tactic involves the use of spear-phishing attacks, employing convincingly crafted messages to deceive targets into clicking on malicious links or opening infected attachments. These malicious payloads were designed to surreptitiously exfiltrate sensitive data, including message content, contact lists, and call logs, from compromised devices.

Furthermore, the post underscores the complexity and sophistication of these APT groups, highlighting their persistence and adaptability in the face of security measures. It details how these actors employed various techniques to obfuscate their activities and evade detection, including using compromised infrastructure and employing layered encryption. The post also emphasizes the interconnectedness of these groups, suggesting a coordinated effort within the broader Russian cyber espionage landscape.

In concluding, the post serves as a significant warning about the persistent and evolving threats posed by state-sponsored actors in the digital realm. It emphasizes the importance of robust cybersecurity practices, including timely software updates, cautious interaction with potentially malicious content, and maintaining awareness of evolving threat landscapes. While the post specifically focuses on Signal, it underscores the broader vulnerability of individuals and organizations to sophisticated cyberattacks, particularly those operating within sensitive geopolitical contexts. The post implicitly encourages users to maintain vigilance and adopt proactive security measures to mitigate such risks.

Summary of Comments ( 4 )
https://news.ycombinator.com/item?id=43102284

HN commenters express skepticism about the Google blog post, questioning its timing and motivations. Some suggest it's a PR move by Google, designed to distract from their own security issues or promote their own messaging platforms. Others point out the lack of technical details in the post, making it difficult to assess the credibility of the claims. A few commenters discuss the inherent difficulties of securing any messaging platform against determined state-sponsored actors and the importance of robust security practices regardless of the provider. The possibility of phishing campaigns, rather than Signal vulnerabilities, being the attack vector is also raised. Finally, some commenters highlight the broader context of the ongoing conflict and the increased targeting of communication platforms.

The Hacker News post titled "Multiple Russia-aligned threat actors actively targeting Signal Messenger" generated a moderate number of comments, mostly focusing on the plausibility and implications of the Google Cloud Threat Intelligence Team's report. Several commenters expressed skepticism about the report's claims, questioning the motivation and evidence presented.

One prominent line of discussion revolved around the lack of technical details in the report. Several users pointed out the absence of specific information about the attacks, making it difficult to assess the credibility and severity of the alleged targeting. They argued that without concrete evidence, the report reads more like a general warning or even fear-mongering. This lack of technical specifics also led some to speculate about the true nature of the attacks, suggesting possibilities like phishing campaigns or attempts to compromise user devices rather than exploiting vulnerabilities in Signal itself.

Another recurring theme was the perceived political context of the announcement. Some commenters questioned the timing and framing of the report, suggesting it might be influenced by the ongoing geopolitical tensions involving Russia. They speculated that the report could be part of a broader narrative aimed at portraying Russia as a cyber threat.

Some users discussed the potential targets of such attacks. Given Signal's popularity among journalists, activists, and other individuals likely to be of interest to Russian intelligence agencies, several comments highlighted these groups as the most probable targets. This led to discussions about the effectiveness of Signal's security measures and whether these attacks, if real, could have successfully compromised user communications.

A few commenters also brought up the broader implications of the report for the security and privacy of messaging platforms. They discussed the challenges of protecting user data against sophisticated state-sponsored attackers and the importance of continuous improvement in security practices.

Finally, a smaller number of comments focused on the technical aspects of potential attacks against Signal. These discussions included speculation about the methods attackers might employ, such as exploiting vulnerabilities in the Signal protocol or targeting specific device platforms. However, due to the lack of information in the original report, these discussions remained largely speculative.

The Forbidden Garden of Leningrad: Science and Sacrifice in a City Under Siege

permalink

Posted: 2025-01-31 20:44:28

During the 900-day siege of Leningrad in World War II, the Vavilov Institute, home to a vast collection of seeds and plant material, became a poignant symbol of resistance and sacrifice. Facing starvation, the scientists working there protected the invaluable collection, even choosing to die of hunger rather than consume the edible seeds and tubers under their care. This act of extraordinary dedication preserved crucial biodiversity for future generations, highlighting the enduring power of scientific commitment amidst unimaginable hardship. The article explores this story, emphasizing the difficult ethical decisions faced by the scientists and the lasting legacy of Nikolai Vavilov, the Institute's founder who perished in a Stalinist prison.

Jessie Childs's article, "Resident Bean Expert," published in the London Review of Books, delves into the extraordinary story of the Vavilov Institute of Plant Industry in Leningrad during the agonizing 872 days of the Nazi siege. The institute, a globally significant repository of agricultural biodiversity, housed millions of seed samples, a veritable ark of future sustenance, meticulously collected by the renowned botanist Nikolai Vavilov and his team from across the globe. Childs paints a vivid and harrowing picture of the scientists' unwavering dedication to safeguarding this irreplaceable collection even as starvation gripped the city.

Facing unimaginable hardship and constantly bombarded by artillery fire, the researchers at the institute prioritized the preservation of the seeds over their own survival. They meticulously cataloged and protected the collection, fighting off rats, combating dampness, and enduring freezing temperatures, all while themselves succumbing to the ravages of hunger. Childs poignantly recounts the tragic tales of scientists who perished surrounded by edible seeds, choosing to protect the future of agriculture rather than succumb to the immediate pangs of hunger. One particularly heart-wrenching anecdote details the sacrifice of rice specialist Dmitri Ivanov, who, surrounded by rice samples, starved to death while preserving the genetic diversity represented by his collection.

The article meticulously contextualizes the siege within the broader historical framework of Stalinist Russia, including the politically motivated persecution of Vavilov himself, who was arrested in 1940 on fabricated charges and ultimately perished in a gulag in 1943, even as his institute valiantly struggled for survival. Childs highlights the irony of Vavilov’s tragic fate, juxtaposing it with the unwavering dedication of his colleagues who, despite the regime's betrayal of their mentor, continued to uphold his vision of safeguarding global biodiversity for the benefit of humanity.

Beyond the immediate narrative of survival, Childs explores the deeper philosophical and ethical questions raised by the scientists’ sacrifices. Their actions, she argues, represent a profound testament to the enduring power of human dedication in the face of extreme adversity. The preservation of the seeds, symbolic of hope for a future beyond the horrors of war and famine, transcended mere scientific endeavor and became an act of almost spiritual significance. The article powerfully demonstrates the inherent tension between individual survival and collective responsibility, highlighting the profound commitment of these scientists to a greater cause than themselves, a cause rooted in the enduring power of scientific knowledge and its potential to nourish and sustain future generations. In their unwavering dedication, the scientists of the Vavilov Institute offer a powerful testament to the enduring resilience of the human spirit and the enduring importance of safeguarding the world's biodiversity.

Summary of Comments ( 15 )
https://news.ycombinator.com/item?id=42891754

HN commenters largely focused on the astounding dedication of Vavilov and his team of scientists. Several highlighted the irony of researchers starving to death amidst a seed bank containing the potential to alleviate global hunger. Some debated the practicality of seed saving in a besieged city, questioning if distributing the food would have been a better short-term solution. Others drew parallels to contemporary seed banks like the Svalbard Global Seed Vault, emphasizing the importance of preserving biodiversity. A few comments offered additional historical context about Lysenko and his detrimental impact on Soviet agriculture, or about other sieges where similar acts of sacrifice occurred. Several commenters expressed gratitude for the article, finding it both informative and moving.

The Hacker News post titled "The Forbidden Garden of Leningrad: Science and Sacrifice in a City Under Siege" (linking to an article in the London Review of Books about scientists preserving a seed bank during the Siege of Leningrad) has several comments discussing various aspects of the story and its historical context.

Several commenters express admiration for the scientists' dedication and the incredible sacrifices they made to preserve the seeds, especially given the horrific conditions of the siege. One commenter highlights the poignant contrast between the scientists starving to death while surrounded by edible seeds, demonstrating their commitment to the future of agriculture. Another commenter points out the immense value of these seed banks, not just historically, but also for current and future research, particularly in the face of climate change and potential future disasters.

The discussion also delves into the historical context of the siege, with some commenters mentioning other instances of similar sacrifices made by scientists and researchers in times of war and conflict. One commenter recalls a story about scientists in Kyiv transporting liquid nitrogen across battle lines to preserve biological samples, further illustrating the lengths people will go to for scientific preservation. The conversation touches upon Lysenkoism, a pseudoscientific theory promoted by Trofim Lysenko in the Soviet Union, which suppressed legitimate genetics research and had devastating consequences for Soviet agriculture. Commenters discuss the potential impact of Lysenkoism on the seed bank and the scientists involved, speculating on the difficulties they might have faced navigating the political landscape of the time.

Some commenters provide additional information and resources, such as links to other articles and books about the siege, seed banks, and the history of Soviet science. One commenter shares a personal anecdote about their grandmother’s experiences during the siege, adding a personal touch to the historical discussion.

There's a short thread discussing the technical aspects of seed preservation, including the challenges of maintaining seed viability over long periods. This leads to a discussion about the Svalbard Global Seed Vault, a modern seed bank designed to protect crop diversity for the future.

Overall, the comments on Hacker News demonstrate a deep appreciation for the scientists’ sacrifice and the importance of preserving biodiversity. They also provide valuable context and further avenues for learning about the Siege of Leningrad, the history of Soviet science, and the critical role of seed banks in safeguarding the future of agriculture.

Cryptocurrency Turns to Cash in Russian Banks (2024)

permalink

Posted: 2025-01-22 15:03:12

KrebsOnSecurity reports on a scheme where sanctioned Russian banks are using cryptocurrency to access the international financial system. These banks partner with over-the-counter (OTC) cryptocurrency desks, which facilitate large transactions outside of traditional exchanges. Russian businesses deposit rubles into the sanctioned banks, which are then used to purchase cryptocurrency from the OTC desks. These desks, often operating in countries with lax regulations, then sell the cryptocurrency on international exchanges for foreign currencies like dollars and euros. Finally, the foreign currency is transferred back to accounts controlled by the Russian businesses, effectively circumventing sanctions. The process involves layers of obfuscation and shell companies to hide the true beneficiaries.

Brian Krebs's December 2024 article, "How Cryptocurrency Turns to Cash in Russian Banks," delves into the intricate mechanisms by which cryptocurrency, initially lauded for its decentralized and pseudonymous nature, is being funneled into the traditional Russian banking system. The piece meticulously details the methods employed by individuals and organized entities to convert digital assets, primarily Bitcoin, into tangible rubles, thereby circumventing international sanctions imposed on Russia following its invasion of Ukraine. Krebs underscores the role of over-the-counter (OTC) cryptocurrency brokers who operate within a gray area of legality, facilitating large-volume cryptocurrency transactions and subsequently injecting the resulting fiat currency into Russian banks. These OTC brokers, often based outside of Russia, act as intermediaries, connecting cryptocurrency sellers with buyers who possess accounts within the Russian financial system.

The article further elaborates on the technical aspects of this conversion process, explaining how transactions are structured to minimize scrutiny and avoid triggering anti-money laundering (AML) and know-your-customer (KYC) protocols. It highlights the utilization of "nesting dolls" or layered transactions, designed to obscure the origin and destination of funds, making it exceedingly difficult for financial institutions and regulatory bodies to trace the flow of money. This deliberate obfuscation allows sanctioned individuals and entities to access the global financial system through the back door, effectively neutralizing the intended impact of the sanctions.

Furthermore, Krebs's investigative journalism exposes the symbiotic relationship between these cryptocurrency brokers and certain Russian banks, some of which appear to be actively facilitating, or at the very least turning a blind eye to, these large-scale cryptocurrency conversions. The article suggests that the volume of cryptocurrency transactions flowing into the Russian banking system is substantial, indicating a significant loophole in the sanctions regime. Krebs also points to the increasing sophistication of the methods used to launder cryptocurrency, demonstrating the adaptability of illicit actors in the face of international pressure. The investigation paints a picture of a complex and evolving financial ecosystem where cryptocurrency, originally envisioned as a tool for financial freedom, is being exploited to undermine international sanctions and bolster a regime subject to significant financial restrictions. The article concludes with a sense of urgency, emphasizing the need for increased vigilance and stricter regulations to address this burgeoning problem and prevent the further erosion of the sanctions regime.

Summary of Comments ( 30 )
https://news.ycombinator.com/item?id=42793538

HN commenters discuss the complexities of Russia's relationship with cryptocurrency, particularly given sanctions. Some highlight the irony of Russia seemingly embracing crypto after initially condemning it, attributing this shift to the need to circumvent sanctions. Others delve into the technicalities of moving money through crypto, emphasizing the role of over-the-counter (OTC) desks and the difficulty of truly anonymizing transactions. Several express skepticism about the article's claims of widespread crypto usage in Russia, citing the limited liquidity of ruble-crypto pairs and suggesting alternative methods, like hawala networks, might be more prevalent. There's debate about the effectiveness of sanctions and the extent to which crypto actually helps Russia evade them. Finally, some comments point out the inherent risks for individuals using crypto in such a volatile and heavily monitored environment.

The Hacker News post titled "Cryptocurrency Turns to Cash in Russian Banks (2024)" linking to a KrebsOnSecurity article has generated several comments discussing the intricacies and implications of the described cryptocurrency off-ramping process in Russia.

Several commenters delve into the specifics of the Russian banking system and regulations, highlighting the apparent contradictions between official sanctions and the alleged practices. One commenter questions the level of KYC/AML compliance within these Russian banks, given the reported ease with which cryptocurrency is converted to rubles. They express skepticism about the robustness of these checks, suggesting potential loopholes or deliberate negligence. Another commenter expands on this by pointing out the potential involvement of corrupt officials within the banking system, facilitating these transactions despite sanctions. This raises questions about the effectiveness of sanctions when internal actors are willing to circumvent them.

The discussion also touches upon the broader geopolitical implications of these financial maneuvers. One commenter speculates on the role of cryptocurrency in helping Russia evade sanctions and maintain access to international markets. They discuss the potential for this to undermine the effectiveness of sanctions as a tool of international pressure. Another commenter raises the point that the situation highlights the complexities of enforcing sanctions in a globalized financial system, particularly with the decentralized nature of cryptocurrencies.

A few comments focus on the technical aspects of cryptocurrency transactions and the methods used to obscure their origin. One commenter mentions "mixing services" or "tumblers," which are used to obfuscate the source of cryptocurrency funds, making it harder to trace them back to sanctioned entities. They explain how these services work and their role in facilitating the movement of funds under the radar.

Some skepticism about the article's claims is also present. One commenter questions the reliability of the sources cited in the KrebsOnSecurity article, emphasizing the importance of verifying information, particularly in a politically charged context like this. Another commenter notes the lack of specific details in the article regarding the banks involved, making it difficult to independently verify the claims.

Finally, some comments offer tangential observations about the evolving landscape of finance and regulation. One commenter reflects on the broader trend of governments grappling with the challenges posed by cryptocurrencies, and the difficulties in regulating a decentralized and rapidly evolving technology. Another commenter predicts an increase in regulatory scrutiny of cryptocurrency exchanges and other related services as governments attempt to tighten control over the flow of digital assets.

Stories with Tag Russia

Jamming: Polish researchers suspect GPS jammers on ships in the Baltic Sea

Summary of Comments ( 10 ) https://news.ycombinator.com/item?id=43266494

Multiple Russia-aligned threat actors actively targeting Signal Messenger

Summary of Comments ( 4 ) https://news.ycombinator.com/item?id=43102284

The Forbidden Garden of Leningrad: Science and Sacrifice in a City Under Siege

Summary of Comments ( 15 ) https://news.ycombinator.com/item?id=42891754

Cryptocurrency Turns to Cash in Russian Banks (2024)

Summary of Comments ( 30 ) https://news.ycombinator.com/item?id=42793538

Summary of Comments ( 10 )
https://news.ycombinator.com/item?id=43266494

Summary of Comments ( 4 )
https://news.ycombinator.com/item?id=43102284

Summary of Comments ( 15 )
https://news.ycombinator.com/item?id=42891754

Summary of Comments ( 30 )
https://news.ycombinator.com/item?id=42793538