The Office Of “Kaspersky Lab”
Photo: Vladislav Shatilo/RBC
Arrests in Center of information security of the FSB and “Kaspersky Lab” could be a result of opposition within the intelligence services, according to sources RBC close to the management of the FSB
Criminal case, involving the arrested employee, “Kaspersky Lab” Ruslan Stoyanov and the head of one of departments of information security Center (Tsib) of the FSB Sergei Mikhailov, could be triggered due to internal conflict in the Russian secret service, told RBC two people close to the leadership of the FSB.
A case of treason
About the arrest and Mikhailov Stoyanov “Kommersant” reported on Wednesday, January 25. According to the publication, they have been detained since Dec 2016. What kind of business they are, the newspaper reports, but notes that in relation to one of the Deputy heads of CDC FSB investigation under article 275 of the criminal code (“treason”), is engaged in management of own security (USB) FSB. The sources said that verified information about “the receipt by employee of Ciba money from one of the foreign organizations by the mediation of employee of a certain Russian company in the field of information security.”
According to “Kommersant”, the investigation of this case may affect the career of the head of the CDC FSB Andrey Gerasimov — he may leave his post.
In “Kaspersky Lab” confirmed the arrest of an employee, but said that it refers to the period when Stoyanov worked for a company. The company could not answer what the court chose a measure of restraint.
In a press-service of Moscow city court of RBC stated that it did not have information which the district courts have considered the requests of the investigation and Mikhailov Stoyanov.
Stoyanov, according to his profile in LinkedIn social network, works in “Kaspersky Lab” from July 2012. Prior to that, he spent nearly three years was employed by the company “Indrik”. As follows from base “SPARK-Interfax”, he still owns 19% stake in this company, which is engaged in software development. The latest data on revenues, dated 2014 year — 14 million rubles.
From 2006 to 2010, Stoyanov headed the Department of network security company “RTKOMM.RU”, subsidiary of “Rostelecom”. Prior to that, he for six years served in the Department of special technical actions (USTM) the municipal Department of internal Affairs across Moscow and left it with the rank of police major.
In “Kaspersky Lab” Stoyanov headed the Department of investigation of computer incidents (ORCS). “By order of our clients, we are engaged in the investigation of incidents related to the activities of cybercriminals. To clarify: we are not the subjects of operational-investigative activity, we are not law enforcement and are not engaged in the investigation of crimes. Our task included establishing the technical aspects of the incident, identify incident behind the crime of infrastructure and assistance to law enforcement in the identification. We work to help business and the community in countering cybercrime,” said Stoyanov in 2014.
The company Kaspersky is actively cooperating with law enforcement. In June 2016, the FSB and the interior Ministry announced about the arrest of members of the hacker group Lurk. We were a group of 50 hackers who stole the banks and big business RUB 3 billion To the capture of the alleged perpetrators were involved in the division, which was led by Stoyanov. “The operation of the interior Ministry and the FSB took place simultaneously in several cities of Russia. It was the largest operation to arrest cybercriminal groups, at least since 2000. I think she will go down in textbooks as an example of teamwork of its participants”, — he marked then. In August, Stoyanov released a report on the activities of the Lurk, stating that employees of “Kaspersky Lab” has studied the group for six years.
The current counterintelligence
CDC FSB deals with cybercrime, including in the field of electronic Commerce and the illegal distribution of personal data. Legally the centre is registered as a separate military unit No. 64829. Data transfer services this division of the FSB in 2016, provided the company “RTKOMM.RU”, where in 2006-2010 worked Stoyanov.
As follows from documentation on the public procurement portal, the contract was awarded in the amount of slightly more than 3 mln. Acts of acceptance of works was signed by the Deputy head of pravikov part of the D. I. In November, the responsible person has changed — it was the Deputy head of Kravchenko S. V.
Employee of Ciba Mikhailov was several times mentioned in the media in connection with various scandals. So, in 2011, the founder of the site Roem.ru Yuri synods said that in 2007 it received a request from Mikhailov with the requirement to disclose details of one of the users of the website. A similar request he received in 2011, also signed by the operatives of the FSB. Synods complained to the Prosecutor General. The Supervisory office stated that the FSB broke the law “On operational-investigative activities”. Management Ciba stated about the inadmissibility of such violations, says the document, which is published synods.
In 2013, Mikhailov appeared in court on process on the case of the company of Chronopay owner Paul Wroblewski. Businessman accused of organizing in 2010 DDoS attacks on the payment system “assist”. As a result, in the course of a week it was impossible to buy tickets on the website of a major customer “Assist” — “Aeroflot”. Wroblewski talked about his innocence, and the prosecution explained, “a slander by Sergei Mikhailov”, with whom he had a “personal conflict”. Mikhailov during the hearing confirmed that familiar with the entrepreneur since 2007, and their relationship was both professional and personal.
A conflict between two centers
Criminal prosecution against the employee of CIB is due to the opposition within the security services, told RBC two people close to the leadership of the FSB. According to them, the CIB has always had a strained relationship with the Centre of information security and special communications FSB (legally it is the military unit No. 43753), which is headed by Andriy Ivashko. The center is engaged in licensing, including cryptographic equipment and helping the Central election Commission to transmit information about the voting results via secure communication channels. At the end of 2016 Ivashko was awarded for helping the work of the CEC.
According to sources RBC, the functionality of the two centers overlap, which was the cause of internal conflict. “Duplication of functions in FSB is necessary. This is an opportunity to obtain information from different sources. Duplication is purely pragmatic, no competition here, — said in a conversation with RBC, the General-the major of FSB in resignation, the former head of public relations Center special services Alexander Mikhailov. — Units have different functions, but very often in some sectors they intersect. Thus, any crossing is in a certain extent increase the level of reliability of the information”.
“Full redundancy in the security services never. One unit may engage in operational work, and the second is counter-intelligence. Intersect, they can only at the level of Director of the FSB,” — said RBC the General-the major of FSB in resignation Valery malevany.
Mikhailov in the conflict between the management units does. “The FSB has never existed internal squabbles that would lead to criminal prosecution. There is always the possibility of elementary by change leaders, layoffs, changes in the structure of these conflicts to solve. I do not see any intrigue. When two units are unable to find a common language, it is resolved surgically and without the use of procedural measures. The FSB — the powerful power structure, where the creation of precise vertical. Inclusion of third party tools is stupid”, — said Mikhailov.
The latest conflict within the FSB between the economic security Service (SEB) and Department of own safety (USB) — ended in the summer of 2016 SEB several generals resigned, and the new head of service was Sergei Korolev, before heading CSS.