United States President Joe Biden speaks before signing an executive order in the State Dining Room of the White House in Washington, DC, the United States, on Friday, July 9, 2021.
Alex Edelmann | Bloomberg | Getty Images
WASHINGTON – President Joe Biden in a phone call Friday morning urged Russian President Vladimir Putin to take action to contain recent ransomware attacks by groups based in Russia.
“I made it very clear [Putin] that when a ransomware operation comes off its soil despite not being state sponsored, the United States expects that if we give them enough information to act who it is, we expect them to act said Biden at the White House on Friday afternoon.
When asked by a reporter whether there would be “consequences” for such attacks, Biden replied, “Yes”.
The US and Russia, according to the President, have “now regularly set up a means of communication in order to be able to communicate with each other when each of us thinks that something is happening in another country that affects our home country”.
Overall, the call “went well, I’m optimistic,” said Biden.
The conversation came just days after a massive new cyber attack by the REvil group believed to be based in Russia.
The hacking gang is demanding $ 70 million in cryptocurrency to unlock data from the attack that spread to hundreds of small and medium-sized businesses in a dozen countries.
A senior government official said Friday that the United States will take “action” to respond to the attack.
“We will not telegraph what exactly these actions will be. Some will be obvious and visible, others may not, but we expect these to take place in the coming days and weeks,” said the official, who asked for anonymity discuss sensitive negotiations.
The official spoke just moments after Biden, who boarded Air Force One en route to Delaware, was asked if it made sense for the United States to attack the actual servers that are hosting ransomware attacks. Biden replied, “Yes.”
The latest REvil attack is part of a series of serious ransomware attacks carried out by groups originating in Russia this spring and summer.
In May, REvil targeted JBS, the world’s largest meat supplier. The company eventually paid a $ 11 million ransom, but not before it temporarily ceased all of its U.S. operations.
Earlier that month, another cybercriminal targeted the operator of the country’s largest gas pipeline, the Colonial Pipeline. The attack forced the company to shut down a pipeline roughly 5,500 miles long, cutting fuel supplies to the east coast of almost half.
As of early Friday afternoon, the Kremlin had not yet published its own reading of the Biden Putin appeal, so it is unclear how the Russian president reacted to Biden’s pressure.
White House press secretary Jen Psaki told reporters Friday the United States had no new information suggesting the Russian government was directly responsible for the attacks.
Putin has always denied any involvement or direct knowledge of ransomware attacks from Russia.
However, US officials say the idea that Putin does not know who these attackers are is not credible as he has a tight grip on Russia’s intelligence services and its more opaque network of contractors.
In June, Biden met personally with Putin in Geneva, where he warned the Russian President to crack down on cyberattacks from Russia.
US President Joe Biden gestures at a press conference after the US-Russia Summit with Russia’s President Vladimir Putin on June 16, 2021 in Geneva, Switzerland.
Kevin Lamarque | Reuters
There, Biden said he presented Putin with a list of critical infrastructures in the United States that, if attacked by Russia-based cybercriminals, would pose a serious national security threat to the United States
“Certain critical infrastructures should be closed to attacks, cyber or other means,” said Biden after the meeting. “I gave them a list, 16 specific entities that are defined as critical infrastructure under US policy, from the energy sector to water systems.”
“So we agreed to hire experts in our two countries to work on specific agreements on what is forbidden and investigate specific cases that come from other countries or from one of our countries,” he said.
By identifying critical infrastructure as locked down, Biden also circled targets that, if attacked by state or non-state actors, would likely deserve a government response.
The White House has so far declined to detail the retaliatory measures taken by the United States in several recent attacks against the cybercriminals themselves on the grounds that such information must remain confidential.
During the phone call on Friday, Putin and Biden also praised their teams’ joint work after the meeting in Geneva, the White House said.
This work led to an important vote in the UN Security Council on Friday to resume the delivery of humanitarian aid to Syria.
4:00 p.m. – This story has been updated to include President Joe Biden’s comments on the call, as well as remarks from a senior administrator.
– CNBC’s Kevin Breuninger contributed to this report.