Russian Firm Admits Using Stolen NSA Hacking Tool, Confirming Israeli Claim

Eugene Kaspersky, the CEO of Kaspersky Lab. Image by Getty
(JTA) — The Russian company Kaspersky Lab confirmed that it had taken source code for a secret American hacking tool via its antivirus software.
The company’s internal investigation came after Israeli intelligence discovered that Russian hackers were using the antivirus software to steal classified information from the United States.
Kaspersky’s anti-virus program is used by 400 million people worldwide, including officials at about two dozen American government agencies.
Source code for a secret American hacking tool was stolen from a National Security Agency employee who had improperly stored them on his home computer, which used Kaspersky antivirus software.
The company said it discovered the code in 2014 in a ZIP file that its software flagged as malicious. Kaspersky said it destroyed its only copy and that no third parties saw the code, though other reports dispute the claim.
According to Kaspersky, it found no evidence that the company had been hacked by the Russians or anyone else except Israel, though it suggested others could have hacked into the American official’s computer through a back door it identified.
The hack was discovered by the company a year later and publicly reported, though it did not name Israel as the culprit. Kaspersky’s report did state, however, that the program was similar to the Duqu virus, which allows the hacker to eavesdrop on conversations and steal electronic files.
Duqu was attributed to the inventors of Stuxnet, the computer worm that set back Iran’s nuclear program by several months or years by affecting some of its computer systems and centrifuges used to enrich uranium after it was released in 2010. Stuxnet was reported to be a joint project of Israel and the United States.
The Forward is free to read, but it isn’t free to produce

I hope you appreciated this article. Before you go, I’d like to ask you to please support the Forward.
Now more than ever, American Jews need independent news they can trust, with reporting driven by truth, not ideology. We serve you, not any ideological agenda.
At a time when other newsrooms are closing or cutting back, the Forward has removed its paywall and invested additional resources to report on the ground from Israel and around the U.S. on the impact of the war, rising antisemitism and polarized discourse.
This is a great time to support independent Jewish journalism you rely on. Make a Passover gift today!
— Rachel Fishman Feddersen, Publisher and CEO
Most Popular
- 1
Opinion My Jewish moms group ousted me because I work for J Street. Is this what communal life has come to?
- 2
News Student protesters being deported are not ‘martyrs and heroes,’ says former antisemitism envoy
- 3
Fast Forward Suspected arsonist intended to beat Gov. Josh Shapiro with a sledgehammer, investigators say
- 4
Politics Meet America’s potential first Jewish second family: Josh Shapiro, Lori, and their 4 kids
In Case You Missed It
-
Culture Actor Ben Platt says his Jewish identity is ‘not defined’ by Israel, showing a gap between him and his influential family
-
Fast Forward Shapiro house fire suspect targeted Jewish governor over pro-Israel stances, search warrant says
-
Fast Forward Jewish family killed in New York plane crash
-
Fast Forward Israelis can no longer enter the Maldives after Palestinian-solidarity ban goes into effect
-
Shop the Forward Store
100% of profits support our journalism
Republish This Story
Please read before republishing
We’re happy to make this story available to republish for free, unless it originated with JTA, Haaretz or another publication (as indicated on the article) and as long as you follow our guidelines.
You must comply with the following:
- Credit the Forward
- Retain our pixel
- Preserve our canonical link in Google search
- Add a noindex tag in Google search
See our full guidelines for more information, and this guide for detail about canonical URLs.
To republish, copy the HTML by clicking on the yellow button to the right; it includes our tracking pixel, all paragraph styles and hyperlinks, the author byline and credit to the Forward. It does not include images; to avoid copyright violations, you must add them manually, following our guidelines. Please email us at [email protected], subject line “republish,” with any questions or to let us know what stories you’re picking up.