FBI says Russia-linked group behind JBS hack

FBI says Russia-linked group behind JBS hack
© Getty

The FBI has identified a Russia-linked group as the entity behind the cyberattack on the meat producing group JBS USA.

“We have attributed the JBS attack to REvil and Sodinokibi and are working diligently to bring the threat actors to justice,” the FBI wrote in a statement on Wednesday.

“We continue to focus our efforts on imposing risk and consequences and holding the responsible cyber actors accountable,” the FBI added.


REvil and Sodinokibi have been described by experts as different names for the same group and past reporting has linked the hackers to Russia.

JBS USA, one of the largest meat suppliers in the country, was the target of a cyberattack on Sunday that impacted its operations, forcing all of the company’s beef plants in the U.S. to shut down.

The attack comes just weeks after Colonial Pipeline was forced to temporarily shutter operations after it was the target of a cyberattack.

The FBI identified the criminal ransomware gang DarkSide as responsible for the attack on the Colonial Pipeline network.

Last month, President BidenJoe BidenRealClearPolitics reporter says Freedom Caucus shows how much GOP changed under Trump Iowa governor suggests immigrants partially to blame for rising COVID-19 cases Biden officials pledge to confront cybersecurity challenges head-on MORE said the White House had “strong reason to believe” that the hackers were based in Russia, but not backed by the Russian government.

The FBI’s confirmation that the JBS cyberattack was perpetrated by a Russia-linked group comes after the White House on Tuesday said the attack likely originated from Russia.


White House principal deputy press secretary Karine Jean-PierreKarine Jean-PierreLabor, environment groups push Congress for 'bold' manufacturing investments Russian hacking group believed to be behind Kaseya cyber attack goes offline Harris to meet with Texas Democrats MORE said the White House was “engaging directly with the Russian government on this matter, and delivering the message that responsible states do not harbor ransomware criminals.”

President Biden and Russian President Vladimir PutinVladimir Vladimirovich PutinBiden officials pledge to confront cybersecurity challenges head-on Biden says Russia spreading misinformation ahead of 2022 elections Kaseya denies paying hackers for decryption key after ransomware attack MORE are scheduled to meet in person next month, the first face-to-face meeting between the two leaders since Biden took office.

White House press secretary Jen PsakiJen PsakiAly Raisman defends former teammate Biles: 'I'm proud of her' On The Money: Schumer, Warren call on Biden to extend student loan pause | IMF estimates 6 percent global growth this year CDC backtracks with new mask guidance MORE on Wednesday said the White House expects the cyberattack to be one of the issues Biden discusses with Putin.

When asked about potential responses and retaliations, Psaki said “we’re not taking any options off the table, in terms of how we may respond.”

“But, of course, there's an internal policy review process to consider that.  We're in direct touch with the Russians, as well, to convey our concerns about these reports,” she added.

In Wednesday’s statement, the FBI said combating cybercrime is one of its “highest priorities.”

“A cyber attack on one is an attack on us all,” the bureau added.

Updated at 7:01 p.m.