New Microsoft report hints at Russia, China using cyber criminals to target hostile nations

A new report by Microsoft is surfacing of how Russia, China, and Iran are increasingly enlisting criminal networks to conduct cyberespionage and hacking operations against nations they consider hostile, such as the U.S. The latest exposure underscores the blurring of lines between state-directed activities and the illicit pursuits of cybercriminals, causing further concern for national security officials and cybersecurity experts alike.

The report reveals how authoritarian governments, without incurring additional costs, are leveraging the skills of criminal hackers to enhance their cyber capabilities. For these states, the partnership increases the scale and effectiveness of cyber operations, while providing hackers with new opportunities for profit and a semblance of official protection.

One significant case highlighted by Microsoft involved a criminal group with ties to Iran that successfully infiltrated an Israeli dating site, attempting to sell or ransom the personal data it obtained. This operation has apparently had dual motives: to embarrass Israelis and generate financial gain.

In another incident, a Russian criminal network accessed over 50 electronic devices used by the Ukrainian military in June, with the sole motive to seek intelligence to support Russia's ongoing invasion. But the group did not appear to be motivated by financial gain, apart from possible remuneration from the Russian government.

Tom Burt, Microsoft's vice president of customer security and trust, said: "We're seeing in each of these countries this trend towards combining nation-state and cybercriminal activities."

However, he stressed that there is currently no evidence of resource-sharing between Russia, China, or Iran in their collaborations with criminal networks.