CyberNew CyberNew
Defensive Security & Blue Team The Record 3 weeks ago

Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Defensive Security & Blue Team

Analyst Takeaway

"Image: Oxygen Forensics Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges The Department of Justice announced Wednesday that it arrested two principals at a data extraction and digital forensics company that sold several U.S. agencies its software while allegedly lying about foreign ownership and the fact that its technology is made in Russia. The Departments..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Oxygen
Image: Oxygen Forensics

Digital forensics firm with US federal contracts covered up ties to Russia, DOJ alleges

The Department of Justice announced Wednesday that it arrested two principals at a data extraction and digital forensics company that sold several U.S. agencies its software while allegedly lying about foreign ownership and the fact that its technology is made in Russia.

The Departments of Defense (DOD) and Homeland Security (DHS) bought Oxygen Forensics’ software after allegedly being lied to about its foreign ties, according to a press release. DHS branches — including the Secret Service, the National Computer Forensics Institute (NCFI), Homeland Security Investigations and the Office of the Inspector General — all used the firm’s products.

Oxygen is a direct competitor of the well-known digital forensics company Cellebrite, whose work with authoritarian governments has drawn worldwide attention. Digital forensic software is frequently used by law enforcement and intelligence agencies to break into phones.

The firm reportedly has nearly 10,000 contracts in more than 150 countries.

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →