Joint security guidance from various U.S. agencies warned American companies about Russia's recruitment of criminals to launch sabotage attacks against Europe's defense industrial base, military installations, logistics facilities and public utilities to undermine allied support for Ukraine.
Authored by the National Counterintelligence and Security Center, the FBI and several Department of Defense agencies, the advisory published on Thursday by the Office of the Director of National Intelligence encouraged U.S. companies, particularly those supporting entities involved in the Ukraine conflict or other ongoing geopolitical conflicts, to remain vigilant and enhance their security efforts to defend against potential Russian sabotage activity.
The guidance, titled Safeguarding the U.S. Defense Industrial Base and Private Industry Against Sabotage, cited recent arson and sabotage attacks that targeted a Ukraine-linked business in London and various infrastructure in Poland on behalf of Russia and Belarus to highlight threats posed by the engagement of the Russian intelligence services with criminals.
To secure the U.S. defense industrial base from such attacks, the document provides indicators of potential sabotage activity, mitigation steps and information on where to report incidents.
Potential sabotage indicators include explicit or implied threats to facilities or personnel; online posts by individuals noting their intent to commit violence; and drone or small unmanned aircraft systems operating near facilities, staff or systems or employees who bring unauthorized cameras, tools or software into the workplace.
U.S. companies are advised to engage with law enforcement and intelligence agencies to be informed about potential threats and best security practices; enhance security posture by providing regular training on security awareness and ensuring physical security, cybersecurity monitoring and surveillance of key system nodes; and improve the security of the supply chain to deter and mitigate sabotage attacks.
The entities are encouraged to report suspicious activities to the FBI and the Cybersecurity and Infrastructure Security Agency.