Russian companies in the framework of the implementation of the “law of Spring” began to search for ways to intercept and decode communication between the users of WhatsApp, Viber, Facebook Messenger, Telegram and Skype, according to the newspaper “Kommersant”.
According to the newspaper, the company Con Certeza, which is developing a system of technical means to ensure the functions of operative-investigative measures (SORM) in the networks of Telecom operators, is looking for a contractor to conduct research on the possibility of interception and decryption of traffic popular messengers.
At the disposal of the newspaper was the correspondence officer Con Certeza technical specialist is one of the Russian companies in the field of information security. The authenticity of the correspondence confirmed the technical specialist and the CEO of this security company.
The letter States that the artists are going to address the main instant messengers – WhatsApp, Viber, Facebook Messenger, Telegram, Skype for iOS and Android platforms. “To prepare an expert opinion on the possibility of interception of sensitive data, i.e. identifiers of the parties to the communication, passwords, messages, when working with a copy of the traffic, and demonstrate a prototype, if possible”, – stated in the document. The same is invited to do a MITM attack Man-In-The-Middle).
According to the correspondence, the study of a single messenger is given two months to start the work available with Viber. Payment for each messenger is 130 thousand rubles for the implementation of the main part of the study and 230 thousand rubles bonus “in the case of obtaining identifiers of the parties or of the text when using MITM”. The aim of the study implementation or the argument about the impossibility of implementation of these functions in lawful in accordance with the regulatory requirements for mobile operators, says fellow Con Certeza.
Representatives Viber, Telegram, WhatsApp and Facebook Messenger has not responded to “Kommersant”, in Microsoft, which owns Skype, declined to comment.
The package of anti-terrorist laws introduced by deputies Irina Yarovaya and Senator Viktor Ozerov, who the press called “Spring package” on behalf of one of the sponsors, was signed by the President on 7 July. The document obliges operators from 1 July 2018 up to six months to store all client traffic, including call recording. Information about the transfer of information must be kept for three years.
Earlier, sources of Kommersant in the presidential administration announcedthat the FSB, Ministry of communications and Ministry of industry and trade to discuss a set of technical solutions that will enable decryption and to provide access to the whole Internet traffic of the Russians in the framework of the “Spring law”.
After a few days, “Kommersant” reported that the working group “Communication and IT” of the expert Council under the Russian government gave a negative conclusion on amendments to the law on the regulation of audiovisual communication and online services such as WhatsApp, Viber, Telegram. In their opinion, the initiative will lead to “degradation of the Runet”.
Last week, the Minister of communications and mass communications Nikolay Nikiforov declaredthat a total decryption of Internet traffic and other data of Russians could hurt the security, “because the technology of a particular encrypting information are different, including the technology used by government agencies”.