AP

Ransomware gang says it targeted National Rifle Association

Oct 27, 2021, 1:29 AM | Updated: 5:38 pm

FILE - A protester holds a sign outside the National Rifle Association's headquarters building duri...

FILE - A protester holds a sign outside the National Rifle Association's headquarters building during a vigil for recent victims of gun violence on Aug. 5, 2019, in Fairfax, Va. A ransomware gang believed to operate out of Russia says it hacked the National Rifle Association, a politically powerful gun-rights group. The gang, which calls itself Grief, published a handful of what appear to be NRA files related to grants the organization has awarded. (AP Photo/Patrick Semansky, File)

(AP Photo/Patrick Semansky, File)

RICHMOND, Va. (AP) — A ransomware gang believed to operate out of Russia says it hacked the National Rifle Association, the most powerful gun-rights group in the United States.

The gang, which calls itself Grief, published a handful of what appear to be the NRA files on a dark web site. The files, reviewed by The Associated Press, relate to grants the NRA has awarded. Ransomware gangs often post a victim’s files publicly in hopes of spurring them to pay out a ransom.

NRA spokesman Andrew Arulanandam said on Twitter that the NRA “does not discuss matters relating to its physical or electronic security” and takes “extraordinary measures” to protect its information. A person with direct knowledge of the situation who was not authorized to discuss the matter publicly and spoke on condition of anonymity, said the NRA has had problems with its email system this week — a potential sign of a ransomware attack.

Ransomware attacks have spiked in recent years against all manner of companies and organizations, but rarely are the targets as politically sensitive as the NRA. The group has long enjoyed close ties to top Republican lawmakers and been a been a major supporter of Republican candidates. The NRA spent tens of millions of dollar in the past two presidential elections trying to help Donald Trump.

The group has been beset by legal and financial troubles in recent years but remains a potent force politically and has more than 5 million members.

Allan Liska, an intelligence analyst at the cybersecurity firm Recorded Future, said it’s highly unusual for a politically active group such as the NRA to be targeted by ransomware gangs, but he said there is no evidence the attack was politically motivated. He said ransomware gangs usually do not target organizations, but vulnerable technologies.

“It’s not likely that this was specifically targeted at the NRA, the NRA just happened to get hit,” he said. “You never know, though.”

Liska said the email problems could be related to the ransomware attack. He said email systems are top targets of ransomware gangs because they often contain sensitive information and hamper an organization’s response to an attack, further incentivizing them to pay a ransom.

Spokespeople for the FBI did not immediately return a message seeking comment.

Greif is believed by many cybersecurity experts to be linked to Evil Corp, a ransomware gang that was previously active. The U.S. Treasury Department imposed sanctions on the group in 2019, saying it had stolen more than $100 million from banks and financial institutions in 40 countries.

U.S. and Russian ties have already been strained this year over a string of high-profile ransomware attacks against American targets launched by Russia-based cyber gangs. President Joe Biden has warned Russian President Vladimir Putin in an effort to get him to crack down on ransomware criminals, but several top Biden administration cybersecurity officials have said recently that they have seen no evidence of that.

____

Associated Press writer Eric Tucker in Washington contributed to this report.

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

Image: A cargo ship is stuck under the part of the structure of the Francis Scott Key Bridge after ...

Associated Press

Authorities identify 2 bodies recovered at site of Baltimore bridge collapse

A major bridge in Baltimore snapped and collapsed after a container ship rammed into it early Tuesday, and several vehicles fell into the river below.

1 day ago

Photo: Mountaineer Jim Whittaker has died at 95....

Gene Johnson, The Associated Press

Lou Whittaker, among the most famous American mountaineers, has died at age 95

Lou Whittaker, a legendary American mountaineer who helped lead ascents of Mount Everest, K2 and Denali, has died at age 95.

1 day ago

File photo: Former Sen. Joe Lieberman speaks in Washington on Jan. 18, 2024....

Associated Press

Former Sen. Joe Lieberman, Democrats’ VP pick in 2000, dead at 82

Former U.S. Sen. Joe Lieberman of Connecticut, who nearly won the vice presidency on the Democratic ticket with Al Gore in 2000, has died.

1 day ago

islamic state attack...

Vanessa Gera, The Associated Press

What we know after the Islamic State group claims responsibility for Moscow massacre

The Islamic State group has claimed responsibility for an attack on a suburban Moscow concert hall that killed at least 133 people.

5 days ago

Moscow shooting...

The Associated Press

Russia: 60 dead, 145 injured in concert hall raid; Islamic State group claims responsibility

Assailants burst into a concert hall in Moscow on Friday and sprayed the crowd with gunfire, killing over 60 people, injuring more than 100.

7 days ago

Photo: Britain's Kate, Duchess of Cambridge visits 282 (East Ham) Squadron, RAF Air Cadets, Cornwel...

Associated Press

Kate Middleton announces she has cancer, is undergoing chemotherapy

Kate Middleton, Princess of Wales, says she is undergoing chemotherapy to treat cancer. She has been out of view since Christmas.

7 days ago

Ransomware gang says it targeted National Rifle Association