An affordable price is probably the major benefit persuading people to buy drugs at www.americanbestpills.com. The cost of medications in Canadian drugstores is considerably lower than anywhere else simply because the medications here are oriented on international customers. In many cases, you will be able to cut your costs to a great extent and probably even save up a big fortune on your prescription drugs. What's more, pharmacies of Canada offer free-of-charge shipping, which is a convenient addition to all other benefits on offer. Cheap price is especially appealing to those users who are tight on a budget
Service Quality and Reputation Although some believe that buying online is buying a pig in the poke, it is not. Canadian online pharmacies are excellent sources of information and are open for discussions. There one can read tons of users' feedback, where they share their experience of using a particular pharmacy, say what they like or do not like about the drugs and/or service. Reputable online pharmacy canadianrxon.com take this feedback into consideration and rely on it as a kind of expert advice, which helps them constantly improve they service and ensure that their clients buy safe and effective drugs. Last, but not least is their striving to attract professional doctors. As a result, users can directly contact a qualified doctor and ask whatever questions they have about a particular drug. Most likely, a doctor will ask several questions about the condition, for which the drug is going to be used. Based on this information, he or she will advise to use or not to use this medication.

More Slime from The SWAMP

Mitch McConnell cancels Senate’s traditional August recess

In a brief written statement, he said: “Senators should expect to remain in session in August to pass legislation, including appropriations bills, and to make additional progress on the president’s nominees.” More here.

At least that is something right?

All of us are mad, no furious with members of Congress. Imagine when some of those members are more angry than YOU at the system?

Leadership works with lobbyists and then leaks to the media. And then you think you have the whole story. Ah, not at all.

Just a teaser for Episode 3 is below.

The Swamp from Daniel Lippman on Vimeo.

In 2017, Congressman Ken Buck of Colorado wrote a book titled Drain The Swamp. 

It is a great primer and a book that can be read in a day. What does go on behind closed doors in Congress? Yep, you will learn it fast. What about those committee assignments and chairmanships? Yep, they are bought. Have you considered discretionary spending? It is illegal. A large handful of congressional members are in fact on our side. Some are so disgusted they are leaving Congress.

Run out and buy the book: Drain the Swamp: How Washington Corruption is Worse than You ThinkCongressman Buck is hardly a rebel but there are those colleagues that say he is. BARTELS: Secretary Wayne Williams’ Denver Broncos shirt ... Yes due to the weapon on the wall for which he was investigated a few years ago.

Remember that shooting at the ballfield? Well, as an aside, prior to that these congressional members packed heat. Likely more are doing the same now.

Here are the members of the House Freedom Caucus who say they currently carry, or did as of 2013 (all are Republicans):

  • Alabama Rep. Gary Palmer
  • Alabama Rep. Mo Brooks
  • Arizona Rep. Paul Gosar
  • Arizona Rep. Matt Salmon
  • Arizona Rep. David Schweikert
  • Arizona Rep. Trent Franks
  • Colorado Rep. Ken Buck
  • Florida Rep. Ted Yoho
  • Florida Rep. Bill Posey
  • Indiana Rep. Marlin Stutzman
  • Louisiana Rep. John Fleming
  • Ohio Rep. Jim Jordan
  • South Carolina Rep. Jeff Duncan
  • South Carolina Rep. Mick Mulvaney
  • Tennessee Rep. Scott Desjarlais
  • Texas Rep. Randy Weber
  • Virginia Rep. Dave Brat

Brooks said the Second Amendment is the “bedrock” of all other amendments, and the pro gun-control argument that the Second Amendment only applies to a militia-owning firearms is preposterous.

“The purpose of the Second Amendment was to ensure that the citizenry could protect itself from a dictatorial and out-of-control government,” Brooks told TheDCNF.

“It has long been a primary goal of kings, dictators, communists, fascists and the like to disarm the citizenry so that there is minimal risk of opposition to centralized government, dictating to the citizenry that is unarmed and defenseless, and unable to assert their rights,” he said. (some of them have already left congress)

***

Fed Gov Spent $76 Billion in 2017 for Cyber Security, Fail v Success

Go here for the Forum Part One

Go here for the Forum Part Two

Fascinating speakers from private industry, state government and the Federal government describe where we are, the history on cyber threats and how fast, meaning hour by hour the speed at which real hacks, intrusions or compromise happen.

David Hoge of NSA’s Threat Security Operations Center for non-classified hosts worldwide describes the global reach of NSA including the FBI, DHS and the Department of Defense.

NSA Built Own 'Google-Like' Search Engine To Share ... photo

When the Federal government spent $76 billion in 2017 and we are in much the same condition, Hoge stays awake at night.

With North Korea in the constant news, FireEye published a report in 2017 known as APT37 (Reaper): The Overlooked North Korea Actor. North Korea is hardly the worst actor. Others include Russia, China, Iran and proxies.

Targeting: With North Korea primarily South Korea – though also Japan, Vietnam and the Middle East – in various industry verticals, including chemicals, electronics, manufacturing, aerospace, automotive, and healthcare.
Initial Infection Tactics: Social engineering tactics tailored specifically to desired targets, strategic web compromises typical of targeted cyber espionage operations, and the use of torrent file-sharing sites to distribute malware more indiscriminately.
Exploited Vulnerabilities: Frequent exploitation of vulnerabilities in Hangul Word Processor (HWP), as well as Adobe Flash. The group has demonstrated access to zero-day vulnerabilities (CVE-2018-0802), and the ability to incorporate them into operations.
Command and Control Infrastructure: Compromised servers, messaging platforms, and cloud service providers to avoid detection. The group has shown increasing sophistication by improving their operational security over time.
Malware: A diverse suite of malware for initial intrusion and exfiltration. Along with custom malware used for espionage purposes, APT37 also has access to destructive malware.

More information on this threat actor is found in our report, APT37 (Reaper): The Overlooked North Korean Actor.

** NSA 'building quantum computer to crack security codes ...  photo

Beyond NSA, DHS as with other agencies have cyber divisions. The DHS cyber strategy is found here. The fact sheet has 5 pillars:

DHS CYBERSECURITY GOALS
Goal 1: Assess Evolving
Cybersecurity Risks.
We will understand the evolving
national cybersecurity risk posture
to inform and prioritize risk management activities.
Goal 2: Protect Federal Government
Information Systems.
We will reduce vulnerabilities of federal agencies to ensure they achieve
an adequate level of cybersecurity.
Goal 3: Protect Critical
Infrastructure.
We will partner with key stakeholders
to ensure that national cybersecurity
risks are adequately managed.
Goal 4: Prevent and Disrupt Criminal
Use of Cyberspace.
We will reduce cyber threats by
countering transnational criminal
organizations and sophisticated cyber
criminals.
Goal 5: Respond Effectively to Cyber
Incidents.
We will minimize consequences from
potentially significant cyber incidents
through coordinated community-wide
response efforts.
Goal 6: Strengthen the Security and
Reliability of the Cyber Ecosystem.
We will support policies and activities
that enable improved global cybersecurity risk management.
Goal 7: Improve Management of
DHS Cybersecurity Activities.
We will execute our departmental
cybersecurity efforts in an integrated
and prioritized way.

Related reading:National Protection and Programs Directorate

NPPD’s vision is a safe, secure, and resilient infrastructure where the American way of life can thrive.  NPPD leads the national effort to protect and enhance the resilience of the nation’s physical and cyber infrastructure.

*** Going forward as devices are invented and added to the internet and rogue nations along with criminal actors, the industry is forecasted to expand with experts and costs.

Research reveals in its new report that organizations are expected to increase spending on IT security by almost 9% by 2018 to safeguard their cyberspaces, leading to big growth rates in the global markets for cyber security.

The cyber security market comprises companies that provide products and services to improve security measures for IT assets, data and privacy across different domains such as IT, telecom and industrial sectors.

The global cyber security market should reach $85.3 billion and $187.1 billion in 2016 and 2021, respectively, reflecting a five-year compound annual growth rate (CAGR) of 17.0%. The American market, the largest segment, should grow from $39.5 billion in 2016 to $78.0 billion by 2021, demonstrating a five-year CAGR of 14.6%. The Asia-Pacific region is expected to grow the fastest among all major regions at a five-year CAGR of 21.4%, due to stringent government policies to mitigate cyber threats, and a booming IT industry.

Factors such as the growing complexity and frequency of threats, increasing severity of cyber security, stringent government regulations and compliance requirements, ubiquity of online communication, digital data and social media cumulatively should drive the market. Moreover, organizations are expected to increase IT spending on security solutions and services, as well. Rising adoption of technologies such as Internet of things, evolution of big data and cloud computing, increasing smartphone penetration and the developing market for mobile and web platforms should provide ample opportunities for vendors.

By solution type, the banking and financial segment generated the most revenue in 2015 at $22.2 billion. However, the defense and intelligence segment should generate revenues of $50.7 billion in 2021 to lead all segments. The healthcare sector should experience substantial growth with an anticipated 16.2% five-year CAGR.

Network security, which had the highest market revenue in 2015 based on solution type, should remain dominant through the analysis period. Substantial growth is anticipated in the cloud security market, as the segment is expected to have a 27.2% five-year CAGR, owing to increasing adoption of cloud-based services across different applications.

“IT security is a priority in the prevailing highly competitive environment,” says BCC Research analyst Basudeo Singh. “About $100 billion will be spent globally on information security in 2018, as compared with $76.7 billion in 2015.”

Crimes or War, the Body Collectors in Mosul

Imagine the other cities in Iraq and Syria. Mosul was part of Assyria as early as the 25th century BC. Of note, in 2008, there was a sizeable exodus of Assyrian Christians. They sought sanctuary in Syria and Turkey due to threats of murder unless they converted to Islam.

Related reading: Aleppo: Tell Our Story After we are Gone

Turkish Airlines New Flight Route to Mosul photo

Iraq Mosul picture, Iraq Mosul photo, Iraq Mosul wallpaper photo

Inside the killing rooms of Mosul

Warning: Graphic images

MOSUL, Iraq — In March, VICE News returned to Mosul for the first time since the war against ISIS was declared over eight months ago.

While life may be returning to normal in the eastern half of the city, on the other side of the river — where the fighting was most intense — the scale of rebuilding that needs to be done is monumental. It’s estimated there are still 8 million tons of conflict debris that need to be moved before reconstruction can start, equivalent to three times the size of the Great Pyramid of Egypt. About 75 percent of that rubble is in West Mosul, and it’s mixed with so much unexploded ordnance that experts say this is now one of the most contaminated spots on the planet.

In the Old City, where ISIS made its last stand, residents have slowly started to come back – a few business owners hoping to repair shops, and families who have no other option but to live in their damaged homes. Some water tanks have been trucked in, and electricity cables have been temporarily patched together along some streets, but the place feels deserted, and in some ways the scene was not that different from how it looked shortly after the fighting.

Eight months on, there are hundreds or perhaps thousands of bodies still under the rubble, making life unbearable for the families who have returned.

The putrefied corpses are mainly Islamic State fighters or their families, since many of the non-ISIS civilian bodies have been dug out and reclaimed by family members or civil defense workers. The bodies that remain are a severe health hazard, but there’s little political will to deal with them, and removing them is risky given the unexploded munitions littering the area. Nevertheless, teams of citizen volunteers are going house-to-house carrying out this gruesome, dangerous work on a daily basis.

**

One volunteer team is led by Sroor al-Hosayni, a 23-year-old former nurse. Many of her group are even younger; some are medical students, but most have no formal training in handling corpses. So far, they say they’ve pulled and bagged more than 350 bodies that no one else was willing to deal with. They laid them in white plastic body bags where municipal trucks can easily collect them, labeling them for any potential explosives found with the corpse.

“We saw that there were bodies everywhere, in the alleys and inside the houses,” Hosayni said. “I took my team and started implementing this idea by going to help municipality and government workers in removing these bodies before summer comes and disease spreads in the city.”

At first the authorities complained, telling her: “‘You don’t have to move ISIS bodies. Leave them there; the dogs will eat them.”

Hosayni replied, “But one or two dogs can’t eat them; there are thousands of bodies.”

A suspected execution room inside the basement of a collapsed building Al Maydan, the district of the Old City where ISIS made its last stand. Hosayni and her team say there are more than 100 rotting corpses here. So far they have pulled more than 30 bodies from this room n the last few weeks. (Adam Desiderio/VICE News)

After filming Hosayni’s team at work near the destroyed Al Nuri mosque, we followed them to Al Maydan — the Old City neighborhood where ISIS made its last stand — where they had been working on one particular site for weeks.

Bulldozers have started clearing a path where Souk Al-Samak Street once ran along the river, but almost nothing else has changed since the air bombardment flattened this district.

The ruins of arched and intricately carved stone doorways open onto inner courtyards like dioramas of the war, frozen in time: Human corpses in varying degrees of decay lying amid stray ordnance, broken china, plastic toy trucks, and discarded military apparel.

Two hundred yards up the street and on the right, the team pointed us to a building on the banks of the Tigris River. Scrambling through the collapsed masonry, we emerged into two mostly intact basement rooms with barred windows looking out onto the river. In the far room, buzzing with flies and inescapable stench, were dozens and dozens of corpses, stacked too deep to count, one on top of another. It seemed to be the remains of a mass execution.

The body collectors told us there were at least 100 bodies in here; the team had already cleared more than 30 but had barely made a dent in the mound of corpses.

23 year-old Sroor al-Hosayni, a former nurse, leads a team of volunteer body collectors pulling corpses out of a collapsed building in Al Maydan, the district of the Old City where ISIS made its last stand. Hosayni and her team of volunteers have been pulling bodies from what they say is an execution room in the basement of this building. (Adam Desiderio/VICE News)

We saw what appeared to be the bodies of children, though it was difficult to verify given the level of decay. We saw no weapons or military gear on the bodies. The team told us they could see bullet wounds to their heads.

There are reports that ISIS locked large numbers of people in rooms like this, using them as human shields during the final days of the conflict. Many of those families died in coalition airstrikes — but this room was intact. It’s possible they could have been executed by ISIS fighters as government forces closed in. But it’s not clear why ISIS would kill or dispose of civilians in this way.

There are also reports of Iraqi forces executing captured ISIS members in this exact neighborhood. Beards and long hair were still visible on some of the corpses, leading the body collectors to believe some could be men who may have been affiliated with ISIS. But speaking to VICE, a senior Iraqi military official rejected any notion that Iraqi forces may have been responsible for the killings and told us that the site had already been investigated, without providing further details.

One international organization that has documented instances where Iraqi security forces have been accused of carrying out executions is Human Rights Watch.

Belkis Wille, the lead Iraq investigator at Human Rights Watch, visited the site soon after we did. She told us she was unaware of any investigation having been done at this particular site, and that — whoever was responsible for the deaths — the removal of evidence was troubling given that this was potentially the site of a war crime.

**

“Sites like that need the proper forensic teams securing the site and conducting the analysis needed to determine whether this is indeed the site of a crime,” Wille told VICE News. “Despite promises by the prime minister at the end of the battle to investigate abuses, we haven’t seen any sign of that leading to teams coming in and doing the investigations necessary. And the question really is, at what point do these sites potentially lose their forensic value and lose the evidence?”

Inside the remains of Great Mosque of al-Nuri in Mosul, Iraq where ISIS leader Abu Bakr al-Baghdadi declared an Islamic State caliphate in 2014. (Adam Desiderio/VICE News)

But for the body collectors — and for many residents of Mosul — with the heat of summer approaching, the overwhelming priority right now is to clean up this city and begin rebuilding. The need to properly document and investigate potential war crimes isn’t at the top of the agenda.

“It’s time to focus on the living, not the dead,” was the mantra we heard from authorities and from many families trying to rebuild their shattered lives.

Nevertheless, the question of what happened in neighborhoods like Al Maydan and others in those final stages before victory was announced, and in the days shortly afterward, refuses to disappear.

In the ultimate stages of the battle to extinguish the last pockets of ISIS from Mosul last summer, access to the “fight zone” became increasingly restricted.

Baghdad declared the conflict officially over on July 10. The announcement, broadcast live on state television, came as a surprise to many, since there were explosions and gunfire still echoing out from the Old City where the last dregs of the Islamic State terrorist group were refusing to surrender.

Just a day before that, VICE News was one of the few outlets that managed to get past the cordon to join a general from Iraq’s elite counterterrorism brigade and an advance team of his men as they carefully picked their way across the booby-trapped rooftops of collapsed buildings in the district of Al Maydan to plant an Iraqi flag on the banks of the Tigris.

It was a journey through hell. The neighborhood had been pulverized by airstrikes and shelling throughout the campaign, but the intensity had grown as ISIS fell back to these ancient, narrow streets lined with buildings dating back to the 12th century. There was hardly a structure still intact, ordnance and bodies lined the route, some fresh, some bloated and badly decomposed from days or weeks in the sun.

Reaching the river was a symbol of having decisively broken through ISIS defensive lines, a long-awaited moment of triumph for the soldiers. But as the flag was raised and the soldiers took selfies, gunfire from a sniper still alive among the rubble sent the party scattering for cover. In those final days, as different units of Iraq’s security forces held impromptu victory celebrations after liberating neighborhoods, the question lingered of what the end of hostilities actually looks like when the enemy is hell-bent on fighting to the death.

We will likely never know who killed the people in the basement room of the house on Al-Samak Street — but as long as claims persist that extrajudicial killings by Iraqi security forces may have taken place, the stakes of not investigating those could be high. While there is little sympathy for ISIS right now in the devastated neighborhoods of Mosul, a culture of impunity for any abuses that were committed could set the stage for the same kinds of grievances that contributed to the group’s rise in the first place.

Cover image: The basement of a collapsed building in Al Maydan, the district of the Old City where ISIS made its last stand. Volunteers have been pulling bodies from what they say is an execution room filled with more than 100 corpses in the basement of this building. (Adam Desiderio/VICE News)

 

What is the Magnitsky Act Anyway

The Global Magnitsky Act enables the United States to sanction the world’s worst human rights abusers and most corrupt oligarchs and foreign officials, freezing their U.S. assets and preventing them from traveling to the United States. Sanctioned individuals become financial pariahs and the international financial system wants nothing to do with them.

Before proceeding, ask yourself: is Global Magnitsky right for my case? The language of the Global Magnitsky Act as passed by Congress was ex-panded by Executive Order 13818, which is now the implementing authority for Global Magnitsky sanctions. EO 13818 stipulates that sanctions may be considered for individuals who are engaging or have engaged in “serious human rights abuse” against any person, or are engaging or have en-gaged in “corruption.” Individuals who, by virtue of their rank, have ordered others to engage or have facilitated these acts also are liable to be sanctioned.

Keep in mind that prior to the EO’s expansion of the language, human rights sanctions were limited to “gross violations of internationally recognized human rights” as codified in 22 USC § 2304(d)(1). The original language also stipulates that any victim must be working “to expose illegal activity car-ried out by government officials” or to “obtain, exercise, defend, or promote internationally recognized human rights and freedoms.” As for sanctions for corruption, it identifies “acts of significant corruption” as sanctionable offenses. This is generally thought to be a stricter standard than the EO’s term “corruption.” It may be worthwhile to aim for this higher standard to make the tightest case possible for sanctions.

As a rule, reach out to other NGOs and individuals working in the human rights and anti-corruption field, especially those who are advocating for their own Global Magnitsky sanctions. Doing so at the beginning of the process will enable you to build strong relationships, develop a robust network, and speak with a stronger voice.

Download the full guide to learn more.

***  And harass they did. Bill Browder is a distant buddy and I watched his communications this morning as he was arrested in Spain. The warrant:

  It was about 40 minutes later, he was released. He was in Madrid is to give evidence to senior Spanish anti Russian mafia prosecutor Jose Grinda about the huge amount of money from the Magnitsky case that flowed to Spain. Now that I’m released my mission carries on. Meeting with Prosector Grinda now. This was the SIXTH Russian arrest warrant using Interpol channels. It was NOT an expired warrant, but a live one. Interpol is incapable of stopping Russian abuse of their systems. He is right.

 

***

United States citizens are outraged about the Kremlin’s incursion into the U.S. electoral system, but that is unfortunately just the tip of the iceberg. Russia is also trying to hijack the U.S. judiciary for corrupt purposes, expropriation and political repression, which has received little attention.

Unlawful seizure of private assets and private companies by the Kremlin has been the norm since Vladimir Putin became president in 2000. Russia’s law enforcement agencies and courts are regularly used for the enrichment of the ruling elite.

Annual State Department and Freedom House reports underscore that the Russian judicial system lacks independence from the country’s powerful executive branch.

The Sergei Magnitsky case is the best-known example of the Russian state’s co-opting of the courts to support its kleptocracy. A cabal of Russian tax and law enforcement officers conspired to defraud Russian taxpayers of $230 million, the largest tax fraud in Russian history, by targeting Bill Browder’s company, Hermitage Capital.

When Magnitsky, Browder’s tax attorney, discovered the fraud and notified authorities, Hermitage and Magnitsky were charged with their own fraud. Magnitsky was then arrested and died in pre-trial detention at the age of 37.

Since then, Russian authorities have repeatedly called on Interpol to disseminate red notices to harass Browder and other victims. Interpol, which is meant to facilitate cross-border coordination among law enforcement agencies, is susceptible to abuse as it passes on requests and notices from states without much scrutiny.

Russia misuses Interpol’s red notices to gain the support of international law enforcement agencies, including U.S. law enforcement, in pursuing political dissidents and victims of corporate raiding.

Russian legal authorities also abuse the U.S. court system by exploiting U.S. federal discovery laws. Under these laws, a foreign party can use the U.S. federal courts to compel discovery from any person under U.S. jurisdiction.

The Russian authorities used this law repeatedly against Yukos and its affiliates, after confiscating the oil giant from Mikhail Khodorkovsky and other shareholders.

More recently, agents of the Russian state have engaged in two federal court cases in New York: a 2016 attempt to loot the assets of Janna Bullock and her real estate investment firm RIGroup, and a 2018 effort to plunder the personal property of banker Sergei Leontiev, a former shareholder of Probusinessbank.

The Russian state is using the discovery process to extract information to further criminal charges and extortion schemes against individuals who fled to the U.S. seeking the protection, safety and rule of law now being undermined.

The Russian government and its associates have developed similar strategies to use federal and state courts to recognize and validate bogus decisions from Russian courts, exploit the U.S. Bankruptcy Code on behalf of sham creditors aligned with the Russian state and enforce illegitimate claims and orders issued by corrupt Russian judges.

Although U.S. judges are permitted to consider evidence questioning the legitimacy of a foreign judicial decision, they are rightly hesitant to speculate on whether another country upholds the rule of law.

Such a determination requires significant analysis beyond the scope and ability of most courts and therefore leaves the U.S. judiciary ill-equipped to defend itself against Russian incursion.

The U.S. is slowly beginning to fight back against Russian intrusion into our courts. In 2017, the United States sanctioned two Russian private-sector lawyers, Yulia Mayorova and Andrei Pavlov, who repeatedly represented Russian government agencies in the United States.

After passage by Congress of the “Global Magnitsky Human Rights Accountability Act,” the U.S. sanctioned Artem Chaika, the son of Russia’s prosecutor general, who used his father’s position to extort bribes and win contracts for himself and his cronies, while driving out competition.

More needs to be done to keep Russian lawlessness abroad at bay. The House and Senate judiciary committees should investigate the hacking of U.S. courts and hold hearings to examine the threat they pose, with an eye toward developing legislation that will help block future attacks.

The Department of Justice and the State Department should consider establishing a joint task force to coordinate with U.S. courts, where victims of abuse by corrupt governments could submit their evidence.

The State Department already produces annual reports that opine on the state of foreign judiciaries, which can be put to good use to protect the integrity of U.S. courts.

FBI Working to Stop Massive Russian Malware Network

Sofacy Cyber-Espionage Group Resurfaces with New Backdoors ...  photo

Cisco’s Talos research unit yesterday reported its discovery of VPNFilter, a modular and stealthy attack that’s assembled a botnet of some five-hundred-thousand devices, mostly routers located in Ukraine. There’s considerable code overlap with the Black Energy malware previously deployed in attacks against Ukrainian targets, and the US Government has attributed the VPNFilter campaign to the Sofacy threat group, a.k.a. Fancy Bear, or Russia’s GRU military intelligence service.
Ukrainian cybersecurity authorities think, and a lot of others agree with them, that Russia was gearing up a major cyberattack to coincide with a soccer League Championship match scheduled this Saturday in Kiev as part of the run-up to the World Cup. They also think it possible an attack could be timed for Ukraine’s Constitution Day, June 28th.
The US FBI has seized a key website used for VPNFilter command-and-control, which US authorities hope will cripple the campaign. The Justice Department says that VPNFilter could be used for “intelligence gathering, theft of valuable information, destructive or disruptive attacks, and the misattribution of such activities.”

***

FBI agents armed with a court order have seized control of a key server in the Kremlin’s global botnet of 500,000 hacked routers, The Daily Beast has learned. The move positions the bureau to build a comprehensive list of victims of the attack, and short-circuits Moscow’s ability to reinfect its targets.

The FBI counter-operation goes after  “VPN Filter,” a piece of sophisticated malware linked to the same Russian hacking group, known as Fancy Bear, that breached the Democratic National Committee and the Hillary Clinton campaign during the 2016 election. On Wednesday security researchers at Cisco and Symantec separately provided new details on the malware, which has turned up in 54 countries including the United States.

VPN Filter uses known vulnerabilities to infect home office routers made by Linksys, MikroTik, NETGEAR, and TP-Link. Once in place, the malware reports back to a command-and-control infrastructure that can install purpose-built plug-ins, according to the researchers. One plug-in lets the hackers eavesdrop on the victim’s Internet traffic to steal website credentials; another targets a protocol used in industrial control networks, such as those in the electric grid. A third lets the attacker cripple any or all of the infected devices at will.

The FBI has been investigating the botnet since at least August, according to court records, when agents in Pittsburgh interviewed a local resident whose home router had been infected with the Russian malware. “She voluntarily relinquished her router to the agents,” wrote FBI agent Michael McKeown, in an affidavit filed in federal court. “In addition, the victim allowed the FBI to utilize a network tap on her home network that allowed the FBI to observe the network traffic leaving the home router.”

FBI working to disrupt massive malware network linked to Russia

The FBI is working to disrupt a massive, sophisticated Russia-linked hacking campaign that officials and security researchers say has infected hundreds of thousands of network devices across the globe.

The Justice Department late Wednesday announced an effort to disrupt a botnet known as “VPNFilter” that compromised an estimated 500,000 home and office (SOHO) routers and other network devices. Officials explicitly linked the botnet to the cyber espionage group known as APT 28, or Sofacy, believed to be connected to the Russian government.

Officials said that the U.S. attorney’s office for the western district of Pennsylvania has obtained court orders allowing the FBI to seize a domain that is part of the malware’s command-and-control infrastructure. This will allow officials to redirect attempts by the malware to reinfect devices to an FBI-controlled server, thereby protecting devices from being infected again after rebooting.

Assistant Attorney General for National Security John C. Demers in a statement described the effort as the “first step in the disruption of a botnet that provides the Sofacy actors with an array of capabilities that could be used for a variety of malicious purposes, including intelligence gathering, theft of valuable information, destructive or disruptive attacks, and the misattribution of such activities.”

Cybersecurity researchers first began warning of the destructive, sophisticated malware threat on Wednesday. Cisco’s Talos threat intelligence group said in a blog post Wednesday that VPNFilter had infected at least 500,000 devices in 54 or more countries.

The researchers had been tracking the hacking threat for several months and were not ready to publish their findings, but when the malware began infecting devices in Ukraine at an “alarming rate,” they decided to publish their research early.

“Both the scale and the capability of this operation are concerning. Working with our partners, we estimate the number of infected devices to be at least 500,000 in at least 54 countries,” the researchers wrote.

The malware targets home and office routers and what are known as network-access storage (NAS) devices, hardware devices that store data in one, single location but can be accessed by multiple individuals — creating a massive system of infected devices, commonly known as a botnet.

VPNFilter also uses two stages of malware, an unusual set up that makes it more difficult to prevent a device from being re-infected after it is rebooted. The FBI on Wednesday urged individuals whose devices may have been infected to reboot them as soon as possible.

The FBI is also also soliciting help from a nonprofit known as the Shadowserver Foundation, which will pass the IP addresses to internet service providers, foreign computer emergency teams and others to help stem the damage.

The malware is the latest sign of the growing cyber threat from Russia. News of the outbreak comes roughly a month after senior U.S. and British officials blamed the Russian government for coordinated cyberattacks on network devices in an effort to conduct espionage and intellectual property theft.

The U.S. has also blamed Moscow for the global cyberattack known as notPetya that ravaged computers across the globe last summer, calling it the most destructive and costly cyberattack in history.

The code of VPNFilter has similarities with version of another malware known as BlackEnergy, which was used in an attack on Ukraine’s power grid in late 2015. The Department of Homeland Security has linked the malware to the Russian government.