Kaspersky Banned by FCC: ‘Threat to National Security’

The Federal Communications Commission added Kaspersky Lab to a list of banned companies. The FCC alleges the firm is a threat to U.S. national security.

On the face of it, it’s no big deal. It merely prevents the FCC from spending a “universal service” budget on Kaspersky products. But the optics are bad for Yevgeny Valentinovich “Eugene” Kaspersky (pictured) and his eponymous company—thanks to those it shares this list with.

This is the first Russian firm added to the list: Up to now, it’s been mostly dodgy Chinese companies, such as Huawei. In today’s SB Blogwatch, we ponder Eugene’s resemblance to Harold.

Your humble blogwatcher curated these bloggy bits for your entertainment. Not to mention: Satisfying montage of controlled demolitions.

Hide the Pain Eugene

What’s the craic? David Shepardson and Raphael Satter report—“FCC adds Russia’s Kaspersky … to national security threat list”:

Malign activity from Moscow
The [FCC] added Russia’s AO Kaspersky Lab … to its list of communications equipment and service providers deemed threats to U.S. national security, … mandated under a 2019 law. … Inclusion on the “covered list” means money from the FCC’s $8 billion annual Universal Service Fund may not be used to purchase or maintain products from the companies. The fund supports telecommunications for rural areas, low-income consumers, and facilities such as schools, libraries and hospitals.

U.S. officials have long said that running Kaspersky software could open American networks to malign activity from Moscow and banned Kaspersky’s flagship antivirus product from federal networks in 2017. Moscow-based Kaspersky has consistently denied being a tool of the Russian government. … FCC Chair Jessica Rosenworcel said the agency worked closely with U.S. national security agencies to update the list and will add additional companies if warranted.

Is this news? Emma Roth disinters the lede—“First Russian company on the list”:

Russian intelligence
This is the first time a Russian company has been added to the list, which is otherwise made up of Chinese companies, like Huawei and ZTE. … In addition to Kaspersky, the FCC also added China Telecom and China Mobile International USA to its list.

In 2017, Russian intelligence allegedly used Kaspersky’s antivirus software to steal classified documents from the National Security Agency — a claim denied by the Moscow-based company.

So Simon Sharwood runs with that angle—“First Russian addition to FCC’s Very Naughty List apparently unconnected to illegal invasion of Ukraine”:

Kaspersky is the first non-Chinese company to be added to the FCC’s list, but the agency did not tie its decision to Russia’s illegal invasion of Ukraine. … Kaspersky commented on its newfound status with its usual arguments: The decision was political, rather than based on a technical assessment of its products or public evidence of wrongdoing.

But what does Kaspersky have to say? Yevgeny Valentinovich’s PR gnomes scribble thuswise—“Kaspersky statement on the FCC public notice”:

Kaspersky is disappointed with the decision, [which] is being made on political grounds. … Kaspersky believes [it] is a response to the geopolitical climate rather than a comprehensive evaluation of the integrity of Kaspersky’s products and services. … Kaspersky … has stated clearly that it doesn’t have any ties with any government, including Russia’s.

Yeah, but that’s not the point, says Darinbob:

Kaspersky is in Russia. Putin has absolute power there, and there’s no way to know if he has insisted that the software be used to hijack foreign computers or not.

It’s a question of trust. malor has first-hand experience:

I stopped using Kaspersky many years ago. The version I tried totally destroyed security on your system by installing its own root signing key into your trust store and giving it full permissions. Then it intercepted all supposedly secure communications.

They insisted that this was necessary to protect you from viruses. I disagreed strongly enough that I wiped that system and started over.

And on the other side of the curtain, here’s cupcakezealot’s experience:

I used to work at Kaspersky. … I don’t think Eugene is a particularly bad guy but complying with Putin’s laws would make it suspect.

Stop your fence-sitting. Binraider goes in harder:

Kaspersky used to be quite good. However, I dropped that recommendation when senior staffers were caught in a cover up of some utterly indefensible behaviour (think: Worst uses of the internet). … Money talks inside Vlad’s Russia, hence cover up and only token police investigation.

Meanwhile, gweihir knows the real reason for the ban:

The NSA absolutely hates Kaspersky sabotaging their spying.

And Finally:

50 minutes of demo’s

Previously in And Finally


You have been reading SB Blogwatch by Richi Jennings. Richi curates the best bloggy bits, finest forums, and weirdest websites … so you don’t have to. Hate mail may be directed to @RiCHi or [email protected]. Ask your doctor before reading. Your mileage may vary. E&OE. 30.

Image sauce: Yevgeny Valentinovich Kaspersky (cc:by-nc-sa)

Richi Jennings

Richi Jennings is a foolish independent industry analyst, editor, and content strategist. A former developer and marketer, he’s also written or edited for Computerworld, Microsoft, Cisco, Micro Focus, HashiCorp, Ferris Research, Osterman Research, Orthogonal Thinking, Native Trust, Elgan Media, Petri, Cyren, Agari, Webroot, HP, HPE, NetApp on Forbes and CIO.com. Bizarrely, his ridiculous work has even won awards from the American Society of Business Publication Editors, ABM/Jesse H. Neal, and B2B Magazine.

richi has 605 posts and counting.See all posts by richi

Secure Guardrails