The German cyber security organisation BSI warned users on Tuesday not to use Kaspersky anti-virus software, saying the company could be involved in hacking attacks amid Russia’s war in Ukraine.
The Federal Cyber Security Authority (BSI) said in a statement that Russia’s military and intelligence activities in Ukraine, as well as its threats to EU and NATO allies, particularly Germany, indicate that there is “a considerable risk of a successful IT attack”.
The BSI warned “A Russian IT manufacturer can itself carry out offensive operations, can be forced to attack target systems against its will, or be itself spied on as a victim of a cyber operation without its knowledge, or be misused as a tool for attacks against its own customers,”
Companies and operators of critical infrastructure are particularly vulnerable, but people may also be affected, according to the BSI, which encourages anyone who is unsure to seek advice.
As early as 2017, the United States prohibited government agencies from using Kaspersky software.
Kaspersky has consistently denied allegations that it collaborates with the Kremlin. However, the US prohibition, which took effect at a time when the company’s software was installed on hundreds of millions of computers around the world, had a significant negative impact on its business.
Military and cyber experts fear that Russia’s invasion of Ukraine could spark a wave of cyberattacks, resulting in a “cyber Armageddon” that will have far-reaching effects for people in both nations, as well as globally.
However, a worst-case situation appears to have been avoided thus far, as the attacks seen appear to be limited in their impact and geographical scope.
In recent years, Germany has regularly accused Russia of attempting cyber espionage.
To date, the most high-profile cyberattack blamed on Russian hackers has been a cyberattack in 2015 that paralysed the computer network of Germany’s lower house of parliament, the Bundestag, taking the entire institution down for days while it was fixed.
Russia has denied any involvement in such actions.