US Bans Russian Cybersecurity Software Amid Threat of Influence Operation
Concerns about Kaspersky were raised as far back as 2017.
The Biden administration is issuing a total ban on the use of a Russian-backed cybersecurity software in the United States. This decision comes amid worries about the Russian government's alleged influence operations over the software, the U.S. Commerce Department announced on Thursday.
Long-standing Concerns About Kaspersky
Kaspersky Lab's software has been a concern for U.S. government officials since at least 2017. Under Russian law, their government has full access to Kaspersky systems and, therefore, access to the data of all its customers, according to U.S. officials.
"Russia has shown it has the capacity, and even more than that, the intent to exploit Russian companies like Kaspersky to collect and weaponize the personal information of Americans," Commerce Secretary Gina Raimondo told reporters on Thursday. Raimondo said the Commerce Department's Bureau of Industry and Security was able to ban Kaspersky under its new authorities.
National Security Concerns
Kaspersky "has long raised national security concerns" and was banned from several government systems as early as 2017, Raimondo said. She added that, "while we've been exploring every option at our disposal, we ultimately decided that given the Russian government's continued offensive cyber capabilities and capacity to influence Kaspersky's operations, that we had to take the significant measure of a full prohibition if we're going to protect Americans and their personal data."
Implementation Timeline
After July 20, Kaspersky is prohibited from forming any new agreements inside the U.S. under the new ban. Kaspersky can provide existing customers with cyber and antivirus software until Sept. 29, but after that, "Kaspersky will not be able to provide security updates." Software services will "degrade," according to the rule.
Raimondo emphasized that Americans and U.S. businesses currently using Kaspersky products will not be breaking the law, but they will not be able to update their products as of Sept. 30. "I would encourage you in the strongest possible terms to immediately stop using that software and switch to an alternative to protect yourself, your data, and your family," the commerce secretary said.
Homeland Security Weighs In
Homeland Security Secretary Alejandro Mayorkas, whose Department has a robust cyber agency, also spoke out, saying that Americans need to know they can rely on the safety of their devices. “The actions taken today are vital to our national security and will better protect the personal information and privacy of many Americans," Mayorkas said. "We will continue to work with the Department of Commerce, state and local officials, and critical infrastructure operators to protect our nation’s most vital systems and assets.”
Kaspersky Denial
ABC News previously reported on the government's concerns about Kaspersky. The head of Kaspersky Lab, Eugene Kaspersky, denied Russia's influence on the software company. In a 2017 interview, Kaspersky called U.S. government warnings about his company "wrong advice" and said that "rumors about our partnership with government agencies [are] false."
The ban on Kaspersky software underscores the U.S. government's commitment to cybersecurity and protecting personal information amidst rising concerns about foreign influence.
