FBI says Russia-linked group behind JBS hack

FBI says Russia-linked group behind JBS hack
© Getty

The FBI has identified a Russia-linked group as the entity behind the cyberattack on the meat producing group JBS USA.

“We have attributed the JBS attack to REvil and Sodinokibi and are working diligently to bring the threat actors to justice,” the FBI wrote in a statement on Wednesday.

“We continue to focus our efforts on imposing risk and consequences and holding the responsible cyber actors accountable,” the FBI added.


REvil and Sodinokibi have been described by experts as different names for the same group and past reporting has linked the hackers to Russia.

JBS USA, one of the largest meat suppliers in the country, was the target of a cyberattack on Sunday that impacted its operations, forcing all of the company’s beef plants in the U.S. to shut down.

The attack comes just weeks after Colonial Pipeline was forced to temporarily shutter operations after it was the target of a cyberattack.

The FBI identified the criminal ransomware gang DarkSide as responsible for the attack on the Colonial Pipeline network.

Last month, President BidenJoe BidenMellman: Trump voters cling to 2020 tale FDA authorizes another batch of J&J vaccine Cotton warns of China collecting athletes' DNA at 2022 Olympics MORE said the White House had “strong reason to believe” that the hackers were based in Russia, but not backed by the Russian government.

The FBI’s confirmation that the JBS cyberattack was perpetrated by a Russia-linked group comes after the White House on Tuesday said the attack likely originated from Russia.


White House principal deputy press secretary Karine Jean-PierreKarine Jean-PierreBiden steps up pressure on Russia to go after cyber criminals FBI says Russia-linked group behind JBS hack All JBS beef plants in US forced to halt production after cyberattack MORE said the White House was “engaging directly with the Russian government on this matter, and delivering the message that responsible states do not harbor ransomware criminals.”

President Biden and Russian President Vladimir PutinVladimir Vladimirovich PutinHillicon Valley: Big Tech critic Lina Khan named chair of the FTC | Lawmakers urge Biden to be tough on cyber during summit with Putin | TSA working on additional security regulations following Colonial Pipeline hack Overnight Defense: Top admiral shoots back at criticism of 'woke' military | Military guns go missing | New White House strategy to battle domestic extremism Lawmakers urge Biden to be tough on cybersecurity during summit with Putin MORE are scheduled to meet in person next month, the first face-to-face meeting between the two leaders since Biden took office.

White House press secretary Jen PsakiJen PsakiLawmakers urge Biden to be tough on cybersecurity during summit with Putin Fox's John Roberts says for media, no Biden-Putin presser is a loss Harris highlights COVID-19 vaccination safety, efficacy in SC event to kick off tour MORE on Wednesday said the White House expects the cyberattack to be one of the issues Biden discusses with Putin.

When asked about potential responses and retaliations, Psaki said “we’re not taking any options off the table, in terms of how we may respond.”

“But, of course, there's an internal policy review process to consider that.  We're in direct touch with the Russians, as well, to convey our concerns about these reports,” she added.

In Wednesday’s statement, the FBI said combating cybercrime is one of its “highest priorities.”

“A cyber attack on one is an attack on us all,” the bureau added.

Updated at 7:01 p.m.