It could take years to evict Russia from the US networks it hacked, leaving it free to destroy or tamper with data, ex-White House official warns

<p><img src="https://static3.businessinsider.com/image/5fdb34f8d366e60018098933-2000/GettyImages-913502382.jpg" border="0" alt="Tom Bossert" data-mce-source="Andrew Harrer-Pool/Getty Images" data-mce-caption="Tom Bossert, former assistant to US President Donald Trump for the Department of Homeland Security, talks to John Kelly, former White House chief of staff, at the CBP National Targeting Center February 2, 2018 in Sterling, Virginia."></p><p></p><bi-shortcode id="summary-shortcode" data-type="summary-shortcode" class="mceNonEditable" contenteditable="false">Summary List Placement</bi-shortcode><p>Russian hackers have likely seized control of hundreds of US federal government computer networks, and it could take years to work out how many and remove them, a former advisor to President Donald Trump has warned.&nbsp;</p><p>Tom Bossert in a <a href="https://www.nytimes.com/2020/12/16/opinion/fireeye-solarwinds-russia-hack.html'action=click&amp;module=Opinion&amp;pgtype=Homepage">New York Times op-ed Wednesday</a> wrote that the "magnitude of this national security breach is hard to overstate."</p><p>Bossert was Trump's homeland security advisor from shortly after the 2016 election until April 2018. He previously served as a homeland security advisor&nbsp; to President George W. Bush.</p><p>He wrote: "The Russians have had access to a considerable number of important and sensitive networks for six to nine months." He said that Russia's foreign intelligence agency, the SVR, was likely behind the attack.</p><p>"While the Russians did not have the time to gain complete control over every network they hacked, they most certainly did gain it over hundreds of them," he wrote. "It will take years to know for certain which networks the Russians control and which ones they just occupy."</p><p>"The logical conclusion is that we must act as if the Russian government has control of all the networks it has penetrated."</p><p>The Russian embassy in the US <a href="https://twitter.com/RusEmbUSA/status/1338330751067172866's=20">has denied</a> that Russia is behind the attack.&nbsp;</p><p>Bossert goes on to describe how the hackers could exploit their access.</p><p>"The actual and perceived control of so many important networks could easily be used to undermine public and consumer trust in data, written communications and services," he writes.</p><p>"In the networks that the Russians control, they have the power to destroy or alter data, and impersonate legitimate people."</p><p>President-elect Joe Biden, as he prepares to take control of addressing the crisis, he wrote, "has to assume that communications about this matter are being read by Russia, and assume that any government data or email could be falsified."</p><p>The attacks were <a href="https://uk.reuters.com/article/us-usa-cyber-treasury-exclsuive/suspected-russian-hackers-spied-on-u-s-treasury-emails-sources-idUKKBN28N0PG">revealed last week by the Reuters news agency</a>, which reported that the State Department the Department of Homeland Security were among the agencies compromised.&nbsp;</p><p>The Treasury and Commerce Department were also infiltrated by the hackers, as well as the National Institutes of Health and the Pentagon, <a href="https://www.businessinsider.com/suspected-russian-hackers-infiltrated-us-agencies-spy-on-emails-2020-12">according to reports.&nbsp;</a></p><p>Many private sector companies and organizations were also hit.&nbsp;</p><p>Bossert's op-ed is one of the starkest warnings yet by a former senior US government security official on the likely extent of the hack and the full damage it could inflict.</p><p>The hackers were able to gain acces to the computers through hacking software made by SolarWinds, a firm that provides remote-access capabilities to IT specialists working for hundreds of US government and corporate clients.&nbsp;</p><p>The Russian malware allowing it to access, monitor, and control compromised system, was hidden in a routine software update.&nbsp;</p><p>The Russian hackers are believed to have had access to US government computer systems since about March, <a href="https://www.washingtonpost.com/national-security/russian-government-spies-are-behind-a-broad-hacking-campaign-that-has-breached-us-agencies-and-a-top-cyber-firm/2020/12/13/d5a53b88-3d7d-11eb-9453-fc36ba051781_story.html">according to The Washington Post</a>, monitoring and potentially stealing sensitive information.&nbsp;</p><p>President Donald Trump has so far not commented on the attacks.&nbsp;</p><p><a href="https://www.businessinsider.com/russia-hack-may-take-years-undo-bossert-2020-12#comments">Join the conversation about this story &#187;</a></p> <p>NOW WATCH: <a href="https://www.businessinsider.com/london-streets-left-deserted-during-covid-19-lockdown-2020-3">Inside London during COVID-19 lockdown</a></p>
Click here to read full news..