cyber.hendryadrian.com
Security News · therecord.media

NSA Restores Tailored Access Operations Name in Offensive Cyber Reorganization

· Original article ↗

Summary

The NSA renamed its Office of Computer Network Operations back to Tailored Access Operations as part of a leadership-driven reorganization intended to improve offensive cyber capabilities and bring developers and operators closer together.

Key points

  • The NSA changed the name of its Office of Computer Network Operations back to Tailored Access Operations (TAO).
  • The move reverses part of the 2016 NSA21 restructuring and is intended to help the agency respond to evolving threats, including those from China and Russia.
  • Former agency personnel said the reorganization brings developers and operators closer together; TAO is expected to open its own building at Fort Meade.
  • The article says TAO develops custom software tools and implants for espionage against foreign computer networks and helped craft the Stuxnet cyber weapon.
  • The U.S. believed Russia and North Korea used stolen NSA tools in cyberattacks including the 2017 WannaCry outbreak, which spread to 150 countries and infected 200,000 organizations.
  • Investigators found no proof that former NSA contractor Harold Martin shared the classified information he hoarded.

Article Details

Event Type
NSA organizational reorganization and renaming: the Office of Computer Network Operations was renamed Tailored Access Operations (TAO).
Impact
The reorganization is intended to bring developers and operators closer together to improve the speed, creativity, and integration of NSA offensive cyber operations. The article also notes TAO's history, including its reported role in developing Stuxnet, and says stolen NSA tools were later used in attacks including WannaCry via EternalBlue.

People

Pete HegsethDefense Secretary who was briefed on the revamped structure during a visit to Fort Meade, according to the article.Tim KosibaNSA Deputy Director who spearheaded the latest organizational change, according to the article.

Threat Actors

Shadow BrokersThe article says the group surfaced online to advertise the sale of stolen hacking techniques; it does not identify who stole the tools.

Malware

StuxnetTAO’s history includes work on Stuxnet and the fallout from stolen tools later abused in attacks like WannaCry, which spread via EternalBlue.WannaCryTAO’s history includes work on Stuxnet and the fallout from stolen tools later abused in attacks like WannaCry, which spread via EternalBlue.

Tools

EternalBlueTAO’s history includes work on Stuxnet and the fallout from stolen tools later abused in attacks like WannaCry, which spread via EternalBlue.

Countries

Chinaa leadership-driven reorganization aimed at improving offensive cyber capabilities against threats from China, Russia, and others.IranThe secretive unit helped craft the cyber weapon known as Stuxnet that was used to sabotage Iran’s nuclear program.Russiareorganization aimed at improving offensive cyber capabilities against threats from China, Russia, and others.

Related Articles