[null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com/files/images_articles/levy-blog-01dec2017.jpg", "src": "https://dd80b675424c132b90b3-e48385e382d2e5d17821a5e1d8e4c86b.ssl.cf1.rackcdn.com/files/images_articles/levy-blog-01dec2017.jpg", "formatted_filename": "levy blog dec"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://6d63d49ccb7c52435540-5070aa97eaa2b8df4eb5a91600e69901.ssl.cf1.rackcdn.com/jeremy-kirk-largeImage-4-a-1611.jpg", "src": "https://6d63d49ccb7c52435540-5070aa97eaa2b8df4eb5a91600e69901.ssl.cf1.rackcdn.com/jeremy-kirk-largeImage-4-a-1611.jpg", "formatted_filename": "jeremy kirk largeImage a", "alt_text": "Jeremy Kirk"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/analysis-did-anthems-security-certification-have-value-showcase_image-3-a-11634.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/analysis-did-anthems-security-certification-have-value-showcase_image-3-a-11634.jpg", "formatted_filename": "analysis did anthems security certification have value showcase image a", "alt_text": "Analysis: Did Anthem's Security 'Certification' Have Value?"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/where-secret-spying-chip-reported-by-bloomberg-showcase_image-8-a-11633.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/where-secret-spying-chip-reported-by-bloomberg-showcase_image-8-a-11633.jpg", "formatted_filename": "where secret spying chip reported by bloomberg showcase image a", "alt_text": "Where Is the Secret Spying Chip Reported by Bloomberg?"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/connecticut-town-pays-ransom-after-crypto-locking-attack-showcase_image-10-a-11631.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/connecticut-town-pays-ransom-after-crypto-locking-attack-showcase_image-10-a-11631.jpg", "formatted_filename": "connecticut town pays ransom after crypto locking attack showcase image a", "alt_text": "Connecticut City Pays Ransom After Crypto-Locking Attack"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/us-charges-russian-in-midterm-election-interference-showcase_image-9-a-11630.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/us-charges-russian-in-midterm-election-interference-showcase_image-9-a-11630.jpg", "formatted_filename": "us charges russian in midterm election interference showcase image a", "alt_text": "Feds Charge Russian With Midterm Election Interference"}, null, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/fda-calls-for-cybersecurity-bill-materials-for-devices-showcase_image-9-a-11628.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/fda-calls-for-cybersecurity-bill-materials-for-devices-showcase_image-9-a-11628.jpg", "formatted_filename": "fda calls for cybersecurity bill materials for devices showcase image a", "alt_text": "FDA Calls for 'Cybersecurity Bill of Materials' for Devices"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/cryptominers-keep-hacking-unpatched-mikrotik-routers-showcase_image-8-a-11627.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/cryptominers-keep-hacking-unpatched-mikrotik-routers-showcase_image-8-a-11627.jpg", "formatted_filename": "cryptominers keep hacking unpatched mikrotik routers showcase image a", "alt_text": "Cryptojackers Keep Hacking Unpatched MikroTik Routers"}, null, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/facebook-eyes-spammers-for-mega-breach-showcase_image-7-a-11625.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/facebook-eyes-spammers-for-mega-breach-showcase_image-7-a-11625.jpg", "formatted_filename": "facebook eyes spammers for mega breach showcase image a", "alt_text": "Facebook Eyes Spammers for Mega-Breach"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/new-look-at-vulnerability-management-showcase_image-8-i-4118.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/new-look-at-vulnerability-management-showcase_image-8-i-4118.jpg", "formatted_filename": "new look at vulnerability management showcase image i", "alt_text": "A New Look at Vulnerability Management"}, null, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/leveraging-saas-to-fill-skills-gap-showcase_image-5-i-4003.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/leveraging-saas-to-fill-skills-gap-showcase_image-5-i-4003.jpg", "formatted_filename": "leveraging saas to fill skills gap showcase image i", "alt_text": "Leveraging SaaS to Fill the Skills Gap"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://75d03c5f1bfbbbb9cc13-369a671ebb934b49b239e372822005c5.ssl.cf1.rackcdn.com/live-webinar-five-steps-to-masterminding-effective-security-awareness-program-showcase_image-7-w-1769.jpg", "src": "https://75d03c5f1bfbbbb9cc13-369a671ebb934b49b239e372822005c5.ssl.cf1.rackcdn.com/live-webinar-five-steps-to-masterminding-effective-security-awareness-program-showcase_image-7-w-1769.jpg", "formatted_filename": "live webinar five steps to masterminding effective security awareness program showcase image w", "alt_text": "Live Webinar: Five Steps to Masterminding an Effective Security Awareness Program"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://dbac8a2e962120c65098-4d6abce208e5e17c2085b466b98c2083.ssl.cf1.rackcdn.com/2018-threat-predictions-pdf-2-w-4005.jpg", "src": "https://dbac8a2e962120c65098-4d6abce208e5e17c2085b466b98c2083.ssl.cf1.rackcdn.com/2018-threat-predictions-pdf-2-w-4005.jpg", "formatted_filename": "threat predictions pdf w", "alt_text": "Advanced Cyberthreat Intelligence Against The 2018 Threat Landscape"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/analysis-did-anthems-security-certification-have-value-showcase_image-3-a-11634.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/analysis-did-anthems-security-certification-have-value-showcase_image-3-a-11634.jpg", "formatted_filename": "analysis did anthems security certification have value showcase image a"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/where-secret-spying-chip-reported-by-bloomberg-showcase_image-8-a-11633.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/where-secret-spying-chip-reported-by-bloomberg-showcase_image-8-a-11633.jpg", "formatted_filename": "where secret spying chip reported by bloomberg showcase image a"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/obamacare-system-breach-affects-75000-showcase_image-6-a-11632.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/obamacare-system-breach-affects-75000-showcase_image-6-a-11632.jpg", "formatted_filename": "obamacare system breach affects showcase image a"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/connecticut-town-pays-ransom-after-crypto-locking-attack-showcase_image-10-a-11631.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/connecticut-town-pays-ransom-after-crypto-locking-attack-showcase_image-10-a-11631.jpg", "formatted_filename": "connecticut town pays ransom after crypto locking attack showcase image a"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/us-charges-russian-in-midterm-election-interference-showcase_image-9-a-11630.jpg", "src": "https://130e178e8f8ba617604b-8aedd782b7d22cfe0d1146da69a52436.ssl.cf1.rackcdn.com/us-charges-russian-in-midterm-election-interference-showcase_image-9-a-11630.jpg", "formatted_filename": "us charges russian in midterm election interference showcase image a"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/safeguarding-critical-infrastructure-from-cyberattacks-showcase_image-7-i-4145.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/safeguarding-critical-infrastructure-from-cyberattacks-showcase_image-7-i-4145.jpg", "formatted_filename": "safeguarding critical infrastructure from cyberattacks showcase image i", "alt_text": "Safeguarding Critical Infrastructure From Cyberattacks"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/vendor-risk-management-conquering-challenges-showcase_image-1-i-4152.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/vendor-risk-management-conquering-challenges-showcase_image-1-i-4152.jpg", "formatted_filename": "vendor risk management conquering challenges showcase image i", "alt_text": "Vendor Risk Management: Conquering the Challenges"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/interview-vmware-coo-raghu-raghuram-showcase_image-1-i-4151.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/interview-vmware-coo-raghu-raghuram-showcase_image-1-i-4151.jpg", "formatted_filename": "interview vmware coo raghu raghuram showcase image i", "alt_text": "Securing 'East-West' Traffic in the Cloud"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/rsa-president-on-case-for-risk-based-security-model-showcase_image-7-i-4147.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/rsa-president-on-case-for-risk-based-security-model-showcase_image-7-i-4147.jpg", "formatted_filename": "rsa president on case for risk based security model showcase image i", "alt_text": "RSA President on the Case for a Risk-Based Security Model"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/uk-cyberattack-investigations-analysis-showcase_image-2-i-4150.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/uk-cyberattack-investigations-analysis-showcase_image-2-i-4150.jpg", "formatted_filename": "uk cyberattack investigations analysis showcase image i", "alt_text": "UK Cyberattack Investigations: An Analysis"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/interview-gartner-sid-deshpande-showcase_image-1-i-4146.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/interview-gartner-sid-deshpande-showcase_image-1-i-4146.jpg", "formatted_filename": "interview gartner sid deshpande showcase image i", "alt_text": "Completely Outsourced Security: A Bad Idea"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/need-for-real-time-risk-management-showcase_image-3-i-4153.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/need-for-real-time-risk-management-showcase_image-3-i-4153.jpg", "formatted_filename": "need for real time risk management showcase image i", "alt_text": "The Need for Real-Time Risk Management"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/network-vs-endpoint-security-striking-right-balance-showcase_image-2-i-4141.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/network-vs-endpoint-security-striking-right-balance-showcase_image-2-i-4141.jpg", "formatted_filename": "network vs endpoint security striking right balance showcase image i", "alt_text": "Network vs. Endpoint Security: Striking the Right Balance"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/ismg-security-report-showcase_image-3-i-4143.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/ismg-security-report-showcase_image-3-i-4143.jpg", "formatted_filename": "ismg security report showcase image i", "alt_text": "An Assessment of Google's Data Leak"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/update-nist-preparing-privacy-framework-showcase_image-7-i-4148.jpg", "src": "https://0267f973c7f511eda6a4-193e28812cee85d6e20ea22afb83e185.ssl.cf1.rackcdn.com/update-nist-preparing-privacy-framework-showcase_image-7-i-4148.jpg", "formatted_filename": "update nist preparing privacy framework showcase image i", "alt_text": "Update: NIST Preparing Privacy Framework"}, null, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com/ondemand-preview-w-255.jpg", "src": "https://f5bd7c2823d8d0533dcb-62d55445ed2ff88556926faa498f48fa.ssl.cf1.rackcdn.com/ondemand-preview-w-255.jpg", "formatted_filename": "ondemand preview w"}, null, {"document_url": "https://www.databreachtoday.eu/after-us-allegations-against-kaspersky-lab-uk-responds-a-10521", "unformatted_src": "https://6d63d49ccb7c52435540-5070aa97eaa2b8df4eb5a91600e69901.ssl.cf1.rackcdn.com/ron-ross-smallImage-a-558.jpg", "src": "https://6d63d49ccb7c52435540-5070aa97eaa2b8df4eb5a91600e69901.ssl.cf1.rackcdn.com/ron-ross-smallImage-a-558.jpg", "formatted_filename": "ron ross smallImage a", "alt_text": "Ron Ross"}, null]
Anti-Malware , Endpoint Security , Endpoint Security

After US Allegations Against Kaspersky Lab, UK Responds

Consider Country of Origin For Some AV Use Cases, British Government Advises Jeremy Kirk (jeremy_kirk) • December 6, 2017

The British government has taken a cue from the U.S. government's concern about Kaspersky Lab's anti-virus software. The U.K.'s National Cyber Security Center, which advises organizations on cybersecurity matters and is part of intelligence agency GCHQ, now recommends that British government agencies that handle certain types of classified information not use anti-virus software developed by any Russia-based organization.


But in a step that goes beyond the NCSC's advice, banking giant Barclays says it will no longer give its customers free copies of Kaspersky's anti-virus software.

The NCSC, however, has stressed that most organizations should carefully consider their own potential risks before opting to ditch Kaspersky's software. Its advice differs from the United States, where the government first advised against procuring Kaspersky and then completely banned it from government networks in early September (see Kaspersky Software Ordered Removed From US Government Computers).

The NCSC's warning will have little immediate effect on Kaspersky Lab. Ian Levy, NCSC's technical director, notes in a blog post that there's almost "no installed base of Kaspersky AV in [U.K.] central government."

But the new guidance could further dim Kaspersky Lab's opportunities for future U.K. sales, both in the government and for large contracts, such as with banks. And the NCSC's recommendation represents yet more bad news for Kaspersky Lab, which has strongly refuted allegations that the Russian government may have co-opted its software to serve as a search engine for other governments' secrets.

Tarnished Darling

Kaspersky Lab's anti-virus product is widely regarded as one of the most capable offerings on the market. Led by the gregarious Eugene Kaspersky, a software engineer turned entrepreneur, the company has a research team that has uncovered some of the world's most sophisticated hacking groups, including Equation, which is widely believed to be the U.S. National Security Agency's offensive hacking team.

But the software company's reputation has been tarnished after anonymous U.S. officials suggested that using its software might put users at risk. In October, Israeli intelligence agents reportedly told the U.S. government that they had hacked into Kaspersky Lab's infrastructure and found that Russian hackers were already there, monitoring the company's communications with endpoints.

Because anti-virus software has deep access to an operating system and the ability to copy files, such applications remain attractive targets for hackers (see Yes Virginia, Even Security Software Has Flaws).

The Kaspersky Lab saga became more complex after the company said that its consumer anti-virus software had flagged and collected four classified documents and NSA-developed malware from the home computer of an NSA analyst in 2014. The analyst, Nghia Hoang Pho, pleaded guilty to mishandling classified material (see Spy Whose Files Were Plucked by Kaspersky Pleads Guilty).

Kaspersky has said that it detected malware on the home PC that it thought might be connected with the Equation Group. As with other anti-virus software, Kaspersky Lab's software collected the suspicious files and sent them back to headquarters for analysis.

When researchers realized what had been collected and informed Eugene Kaspersky, he says that he ordered the material to be deleted, the company said last month following an in-depth investigation into the incident. But the U.S. government alleges that the material ended up in the hands of the Russian government after the analyst's computer was further targeted (see Report: NSA Secrets Stolen From Computer Using Kaspersky Software).

Recommendation: Not For Secrets

The British government has now reacted to these allegations. "There's been a lot of speculation about foreign involvement in the U.K. supply chain recently," Ian Levy, technical director of the U.K. National Cyber Security Center, says in a blog post.

In a letter to the permanent secretaries of U.K. government bodies, Ciaran Martin, head of the NCSC, writes that Russian anti-virus products should not be used for certain official-tier organizations or anyone handling information classified as "secret" or higher. But most systems, he says, are not at risk.

"Russia has the intent to target U.K. central government and the U.K.'s critical national infrastructure," Martin writes. "However, the overwhelming majority of U.K. individuals and organizations are not being actively targeted by the Russian state, and are far more likely to be targeted by cybercriminals."

Because of the "highly intrusive" nature of anti-virus software and the fact that most products send data and information back to a vendor, "that's why the country of origin matters," Martin writes.

"It isn't everything, and nor is it a simple matter of flags - there are Western companies who have non-Western contributors to their supply chain, including from hostile states," he writes. "But in the national security space there are some obvious risks around foreign ownership."


In a separate blog post, Levy - the NCSC's technical director - says that the agency's advice is "a bit complex and nuanced" but stresses that no one should panic. "For example, we really don't want people doing things like ripping out Kaspersky software at large, as it makes little sense," he writes.

Future efforts may also ease any lingering concerns. Martin says that the NCSC is in discussions with Kaspersky Lab that are focused on developing a framework that could be used to verify that U.K. data isn't transferred to the Russian state.

"We will be transparent about the outcome of those discussions with Kaspersky Lab, and we will adjust our guidance if necessary in the light of any conclusions," Martin writes.

In a statement, Kaspersky Lab says it "looks forward to continuing our dialogue with the NCSC to develop a framework that can independently verify and provide assurance of the integrity of Kaspersky Lab's products and services."

Barclays Bails

Some British users of Kaspersky Lab products, however, have already cut ties with the company. British bank Barclays, for example, has withdrawn an offer to its customers to receive a free copy of Kaspersky Lab's anti-virus software, Reuters reports.

Many banks have deals with anti-virus companies to offer free security software, which reduces the risk of bank-related fraud that starts with malicious software infections.

In response to the Barclays move, Kaspersky Lab says it is "disappointed Barclays has decided to discontinue offering Kaspersky Lab anti-virus to new customers. It's very important to note that the NCSC is not encouraging consumers or businesses against using Kaspersky Lab software."

A CISO Outlines 2018 Risk Management Priorities
Next Ethiopia Deployed Israeli-Made Spyware Against Dissidents
 Jeremy Kirk

Managing Editor, Security and Technology, ISMG
 Facebook Eyes Spammers for Mega-Breach
 Live Webinar: Five Steps to Masterminding an Effective Security Awareness Program