‘There are compromises against some critical infrastructures’ Biden deemed ‘off-limits’: FBI cyber official testifies

Tim Hinchliffe
Tue, 29 Mar 2022 20:50:15 +0000
Government and Policy, biden, cybersecurity, fbi, government, hearing, russia

On the heels of US President Joe Biden’s warning of a Russian cyberattack on America’s critical infrastructure, the assistant director of the FBI’s Cyber Division testifies “there are compromises against some” of the 16 critical infrastructure sectors considered to be “off-limits.”

In June, 2021, President Biden told reporters he gave Russian President Vladimir Putin a list of 16 critical infrastructure sectors that were “off-limits” to cyberattacks.

Today, Bryan Vorndran, Assistant Director at the FBI’s Cyber Division, testified before the House Judiciary Committee that there were compromises against some of those 16 critical infrastructure sectors.

However, the FBI official wouldn’t identify which sectors had compromises, nor could he answer whether the compromises came from Russia or some other entity, nor could he speak to the extent of the compromises.

Also in today’s “Oversight of the Federal Bureau of Investigation, Cyber Division” hearing:

Rep Matt Gaetz entered content from Hunter Biden’s laptop into the official record

Chairman Jerry Nadler initially objected to Gaetz’s request “pending further investigation,” but later allowed it

Witness from the FBI testified there were no “swaps or concessions” made for convicted Russian hacker Aleksei Burkov’s deportation to Moscow in 2021

“There are compromises against some of those 16 critical infrastructure sectors that you mentioned — I can’t speak specifically to which ones” — Bryan Vorndran, FBI

When asked by Representative Andy Biggs if there had been “any cybersecurity attacks or breaches” on the list of 16 critical infrastructure sectors given to Putin, Vorndran at first testified that he didn’t know the answer.

However, he backtracked moments later, recalling, “There are compromises against some of those 16 critical infrastructure sectors that you mentioned — I can’t speak specifically to which ones.”

The confusion may have had to do with the line of questioning, in that Biggs didn’t ask if Russia specifically had conducted the attacks, so the “compromises” mentioned by Vorndran may or may not have been attributed to Russia.

When later asked by Representative Darrell Issa if a Russia-based organization had recently tried to hack US assets, the FBI official said he wanted to consult with someone about what was and wasn’t classified before answering.

“The threat from Russia in the criminal sense and the nation state sense is very, very real” — Bryan Vorndran, FBI

The 16 critical infrastructure sectors that Biden told Putin were “off-limits” are listed on the US Cybersecurity & Infrastructure Security Agency’s (CISA) website, and they include:

Chemical

Commercial Facilities

Communications

Critical Manufacturing

Dams

Defense Industrial Base

Emergency Services

Energy

Financial Services

Food and Agriculture

Government Facilities

Healthcare and Public Health

Information Technology

Nuclear Reactors, Materials, and Waste

Transportation Systems

Water and Wastewater Systems

Last week, Politico reported that Russian hackers had recently scanned the networks of at least five US energy companies, along with 18 other US defense, financial services, and IT firms.

Bryan Vorndran

“The scanning […] really is a reconnaissance phase to understand what the net defense side of that company would look like and whether there are vulnerabilities that can or cannot be exploited” — Bryan Vorndran, FBI

When asked by House Committee on The Judiciary Chairman Jerry Nadler about possible motivations for scanning American energy companies, Vorndran likened it to a bank robber scoping-out their next big heist.

“In order for a criminal to conduct a bank robbery, it’s undoubtedly true that that criminal is going to likely to conduct reconnaissance surveillance to understand when the bank may be open, when the bank may be closed, what the security posture looks like,” said Vorndran.

“And the scanning […] really is a reconnaissance phase to understand what the net defense side of that company would look like and whether there are vulnerabilities that can or cannot be exploited.

“It’s an extremely important part of the overall attack cycle,” he added.

“Russia is one of the two most capable cyber adversaries we face globally […] They are a formidable foe” — Bryan Vorndran, FBI

When asked by Representative Sheila Jackson Lee if Russia could win a war with cyberattacks, Vorndran responded:

“Russia is one of the two most capable cyber adversaries we face globally. Whether they have the ability to completely destabilize our country and win a war is a whole different conversation, but they are a formidable foe.”

“There was no swap or concession [for Russian hacker Burkov’s release]” — Bryan Vorndran, FBI

With the notion of Russia being a “formidable foe” in the cyber arena, Representative Jim Jordan asked why Aleksei Burkov, a Russian hacker, who in 2020, pleaded guilty and was sentenced to nine years in a US prison for running a website that “sold more than 150,000 stolen credit card accounts” resulting in “more than $20 million in fraudulent purchases on US cards” was suddenly deported from the US to Russia in September, 2021.

The FBI’s assistant director for cyber said he didn’t know why Burkov, whom CNN reported was seen as “a key player in Russia’s cybercriminal underworld” by US officials, was allowed to board a commercial flight back to Moscow.

Jordan: “Mr. Vorndran, why did the Biden administration release Burkov?”

Vorndran: “Sir, Mr. Burkov was investigated by the US Secret Service, not by the FBI.

“I don’t know specifics; what I do know is that there was no swap or concession, and it’s my understanding that his release –“

Jordan: “We didn’t get anything for him?”

Vorndran: “Sir, to the best of my knowledge, there were no swaps or concessions.”

In October, 2021, The Daily Beast tried to find out who was ultimately responsible for letting Burkov go but was given the runaround, being told by the White House and Departments of Justice and State to talk to ICE, while the FBI said to talk to the Secret Service, and the Secret Service referred the publication back to ICE.

“I’m not here to talk about the [Hunter Biden] laptop; I’m here to talk about the FBI’s cyber program” — Bryan Vorndran, FBI

Representative Matt Gaetz used his time to ask Vorndran about Hunter Biden’s laptop — where it was and if he had investigated whether the First Family may be compromised “as a result of the Hunter Biden laptop.”

Vorndran testified he didn’t know the location of the president’s son’s laptop, and it was not in his “purview of investigative responsibilities” to answer such questions.

Gaetz tried to enter an external drive containing the contents of Hunter Biden’s laptop into the official record under a unanimous consent request, but Chairman Nadler initially objected to his request “pending further investigation.”

“It’s a unanimous consent request, and I object pending further investigation,” said Nadler, adding, “It may very well be entered into the record after we look at it further.”

Update: Content from Hunter Biden’s laptop was later entered into the record.

Moments ago, I successfully entered the hard drive of Hunter Biden’s laptop into the Congressional Record.

SUBPOENA HUNTER BIDEN! pic.twitter.com/M800vm2pTY
— Former Congressman Matt Gaetz (@FmrRepMattGaetz) March 29, 2022

Facebook ‘relied heavily on FBI’ briefings before trying to prevent NY Post story from ‘spreading wildly’: Zuckerberg

Cyber pandemic preppers: Cyber Polygon 2022 to focus on ‘digital resilience in the cloud age’

WEF Global Risks Report warns of cyber pandemic, erosion of public trust & social cohesion

‘Lack of cybersecurity has become a clear & immediate danger to our society’: Klaus Schwab, Cyber Polygon 2021

Conflicts of interest with Facebook censorship, the Atlantic Council, Burisma & politics: perspective