Betrayal in the FSB: what is known about the arrests in the security services and Kaspersky Lab

Arrests in the Information Security Center of the FSB and Kaspersky Lab could be the consequence of conflict within the security services, as claim RBC sources close to the higher echelone of the FSB.
26.01.2017
RBC
Origin source
The criminal case, which involves the arrested employee of "Kaspersky Lab" Ruslan Stoyanov and the head of one of the divisions of Information Security Center (CDC) of the FSB Sergei Mikhailov, could be initiated because of the internal conflict in the Russian secret service, told RBC two source close to the leadership FSB.

The case of treason

The arrest and Mihaylova Stoyanova "Kommersant" reported on Wednesday, January 25th. According to the newspaper, they have been detained since December 2016. On what is the case they pass, the publication does not report, but notes that, in respect of one of the deputy head of the FSB CDC investigation on Article 275 of the Criminal Code ( "treason"), it is engaged in managing its own security (SSG) of the FSB. Publishing two sides clarified that the verified information on "getting money from Ciba employee of one of the foreign companies by a member of a certain Russian company in the field of information security."

According to "Kommersant", the investigation of this case may affect the career head of the CDC FSB Andrei Gerasimov - he can leave his post.

In "Kaspersky Lab" have confirmed the arrest of the employee, but made it clear that the case relates to the period when Stoyanov has not worked for the company. The company could not say exactly what the court chose a measure of restraint.

The press service of the Moscow City Court RBC said they do not have the information which the district courts have considered requests investigation of the case and Mihaylova Stoyanova.

Former operative

Stoyanov, as follows from its profile in the social network LinkedIn, working in the "Kaspersky Lab" in July 2012. "Indrikis-missile defense" was on the staff of the company Prior to that he was almost three years. As the database "SPARK-Interfax", he still holds 19% stake in this company, which is engaged in software development. The latest data on sales dated 2014 year - 14 million rubles.

From 2006 to 2010, Stoyanov managed network security department of the company "RTComm.RU", subsidiary of "Rostelecom". Prior to that, he served for six years in the management of special technical measures (USTM) police in Moscow and left with the rank of police major.

In "Kaspersky Lab" Stoyanov headed the investigation department of computer incidents (Orcs). "At the request of our customers, we are investigating incidents of cybercrime activities. More exactly, we are not the subjects of operational-investigative activity, we are not law enforcement agencies, and are not engaged in the investigation of crimes. Our task is to establish the technical aspects of the incident, revealing behind the incident criminal infrastructure and assistance to law enforcement agencies in identifying. We are working to help businesses and the public in combating cyber crime ", - said Stoyanov in 2014.

Kaspersky company actively cooperates with law enforcement agencies. In June 2016 the FSB and the Interior Ministry announced the arrest of members of the hacker group Lurk. The group had 50 hackers who stole from the banks and big business of 3 billion rubles. By the capture of the alleged perpetrators was involved in a division, led by Stoyanov. "The operation of the FSB and the Interior Ministry took place simultaneously in several cities of Russia. It was a major operation to arrest cybercriminal groups, at least since 2000. I think it will go into the textbooks as an example of well-coordinated work of its members, "- said he then. In August Stoyanov published the report on the activities Lurk, stating that employees "Kaspersky Lab" group studied for six years.

Acting counterspy

CDC FSB is engaged in cybercrime, including in the field of e-commerce and the illegal distribution of the personal data. The legal center is registered as a separate military unit №64829. Data services this division of the FSB in 2016 provided the company "RTComm.RU" which Stoyanov worked in 2006-2010.

It follows from the documents on the procurement portal, the contract was signed in the amount of slightly more than 3 million rubles. Recruitment Acts of each month signed the deputy head of the DI Pravik In November, the person in charge has changed - they became deputy head Sergey Kravchenko

Officer Ciba Mikhailov several times mentioned in the media in connection with various scandals. So, in 2011 the founder of the site Roem.ru Yuri Synods said that in 2007 he received a request from Mikhailov with the requirement to disclose details of one of the users of the site. A similar request he received in 2011, also signed by the FSB operatives. Synods complained to the Prosecutor General. The supervisory agency said that the FSB has violated the law "On operative-investigative activities". Guide Ciba pointed to the inadmissibility of such violations, the document said, who published Synods.

In 2013, Mikhailov appears in court at the trial of Chronopay entrepreneur Paul Wroblewski. Businessman accused of organizing the 2010 DDoS-attacks on the "Assist" payment system. As a result, within a week it was impossible to pay for e-tickets on the site of the main customer "Assist" - "Aeroflot". Wroblewski spoke of his innocence, and the institution of proceedings explained, "a slander on the part of Sergei Mikhailov," with whom he had a "personal conflict". Mikhailov at the hearing confirmed that the sign with the owner since 2007, and their relationship was both professional and personal.

Conflict of two centers

Criminal proceedings against an employee due to the Ciba opposition within the security services, told RBC two companion close to the leadership of the FSB. According to them, from Ciba had always been tensions with the protection of information and special communication Centre FSB (legally this military unit №43753), which is headed by Andrew Iwashko. The center is engaged in licensing, including cryptographic equipment and help the Central Election Commission (CEC) to transmit information on the voting results via secure communication channels. At the end of 2016 Iwashko was awarded for helping the CEC.

According to RBC sources, the two centers of the functionality is the same in many ways, that was the cause of the conflict. "Duplication of functions in the FSB needed. This is an opportunity to receive information from different sources. Duplication is purely pragmatic, no competitiveness here, - he said in a conversation with RBC FSB Major General, retired, former head of public relations center of the special services Alexander Mikhailov. - Divisions different functions, but very often in some sectors they intersect. At the same time any cross - is to some extent the level of reliability of the information increase. "

"Duplication is never in the security services. One unit can be engaged in operational work, and the second - the counter-intelligence. They can intersect only at the level of Director of the FSB ", - he told RBC FSB Major General retired Valery Malevanny.

Mikhailov in the conflict between the management units do not believe. "The FSB has never existed internal squabbles, which would result in criminal prosecution. It is always possible by changing the elementary heads layoffs, structural changes to solve these conflicts. I do not see no intrigue. When the two units can not find a common language, it is permitted to surgically and without the use of procedural measures. FSB - a powerful force structure, which built a clear hierarchy. Connect a third-party tool stupid "- said Mikhailov.

Last known conflicts within the FSB - between the Economic Security Service (SES) and its own security management - completed in the summer of 2016, several SEB generals resigned, and the new head of service was Sergei Korolev, before heading CSS.