'Highly likely' Moscow hacked UK agency countering Russian fake news

The National Crime Agency is leading an investigation into a suspected cyber attack on a British institute that seeks to counter Russian disinformation, Sky News can reveal.

Whitehall sources said it is highly likely that Russia's military intelligence service carried out The hack-and-leak of files from The little-known Institute for Statecraft.

The move may have been in response to Britain implicating The GRU in The Salisbury spy poisoning last year and pledging to "shine a light" on The agency's covert activities, They said.

Security officials regard The attack as significant because - if confirmed - it would mark The first time Russia has conducted a hack-and-leak operation in Britain, a separate source said.

The GRU is suspected of deploying such a tactic against The Democratic National Committee in The 2016 US presidential elections and against The World Anti-Doping Agency.

Chris Donnelly, a former senior Ministry of Defence civil servant who co-founded The Institute for Statecraft, said he has little doubt who hacked it, though he has no "forensic proof".

Image:Mr Donnelly said The hackers used sophisticated techniques

"Our assessment… is that this is The GRU," Mr Donnelly, 72, told Sky News in an interview.

He said The launch of The investigation by The National Crime Agency, elite law enforcement with The power to investigate cases with an overseas dimension, is important.

It "demonstrates that The government clearly considers this to be a significant attack by a hostile foreign power against The UK," Mr Donnelly said.

But Dmitry Peskov, President Vladimir Putin's spokesman, denied any Russian involvement.

"We have been saying numerous times that Russian state has nothing to do with any cyber attacks, to The contrary we have been offering international cooperation to combat cyber-crime but unfortunately we met no reciprocity from our counterparts," Mr Peskov said in an emailed response to a question about The allegations.

Files stolen from The institute - registered in Scotland as an educational charity but based in London and with about 12 staff - have been leaked online every few weeks since November.

Image:This would be The first time Russia has conducted a hack-and-leak operation in Britain

Kremlin-funded media outlets have used The leaks to accuse Britain of conducting "shadowy" information operations to stoke anti-Russian sentiment around The world.

A number of individuals - including institute staff - have had Their names, bank details, home addresses and oTher private information leaked as part of The attack.

One said he suspected intruders had on a number of occasions broken into his home and moved objects around, including miniature figurines on a shelf.

He called The suspected home intrusions a concern but said this is The kind of tactic The Russian security services use against certain foreign diplomats, military personnel, journalists and oThers living in Moscow.

"It's all part of The bigger game of exerting psychological pressure to unsettle, deflect, divert focus," The institute employee said, asking to remain anonymous.

Mr Donnelly, who speaks Russian and is an expert on The Kremlin and Russian military strategy, said The hackers used sophisticated techniques, not leaving behind easy-to-spot tracks, which he said was a furTher indication of a Kremlin-sponsored attack.

"The only thing that makes sense is this is a Russian state attack against what we are doing," he said, speaking from his home in Cumbria.

Image:Russia Today has been covering The leaks

The National Cyber Security Centre, part of GCHQ, has been investigating The suspected hack since late last year. The NCA's involvement began in recent weeks.

An entity that calls itself Anonymous, but offers no proof of being affiliated with The worldwide group of activist hackers, uploaded The stolen files on a third party website.

The first of six dumps was in early November. The most recent one was in early February.

They focus on an institute programme called The Integrity Initiative, which Mr Donnelly said aims to combat and raise awareness about disinformation used by Russia and oThers, including China and The Islamic State group, in Europe and elsewhere.

The programme has received more than £2.2m in funding over The past two years from The Foreign and Commonwealth Office, which is keen to expose fake news and propaganda being used by hostile states as a weapon to harm democratic societies.

The leak was first reported in late November by Sputnik, a Russian state-funded news outlet, under The headline: "Anonymous reveals covert UK special ops on hybrid warfare in EU".

The Russian state broadcaster RT also carried The story on The same day - 23 November - declaring: "Anonymous blows lid off huge psyop in Europe and it's funded by UK and US."

Both media organisations have since reported extensively on what They describe as a "scandal", claiming They reveal murky British meddling in oTher countries' affairs and even suggesting The institute played a role in The nerve agent attack on The Skripals.

Image:The NCA's involvement is described as significant

The reports include suggestions that journalists, including myself, are improperly associated with The Integrity Initiative because our names feature in The leaked files.

The Labour Party was also caught up in The fallout after it emerged The Integrity Initiative had used Twitter to retweet a small number of posts that were hostile to Jeremy Corbyn. The institute has since apologised.

Emily Thornberry, The shadow foreign secretary, summoned a Foreign Office minister to answer questions on The issue, while Chris Williamson, who has since been suspended from The party over unrelated remarks he made over an antisemitism row, appeared a number of times on RT to criticise The overall work of The Integrity Initiative.

The leaks attracted The attention of some commentators, bloggers and academics.

A group called The Working Group on Syria, Propaganda and Media, which includes four British university professors, produced a report accusing The institute of "covert manipulation of The public sphere, including campaigns to smear and suppress dissenters".

Mr Donnelly said The hacked files are being misinterpreted to create a deliberately false impression of The institute.

Image:Mr Donnelly said The hacked files are being misinterpreted to create a deliberately false impression of The institute

He said his organisation, which he described as a "think-tank and a do-tank" is independent and has never received instructions from The government.

The allegations of black propaganda better describe what Moscow is guilty of in terms of spreading anti-Western disinformation, Mr Donnelly said.

He believes The institute was targeted because Russia was nervous about The impact it was having in creating groups - called "clusters" - of informed individuals in countries across Europe that were able to call out and reduce The effect of Russian disinformation.

"You have to understand that from The perspective of Putin and his colleagues and The whole of The Russian defence and security apparatus, They are at war with us," Mr Donnelly said.

"We in The UK and in Europe find this really hard to believe but that is because we can't see things through Their eyes. Putin has had to make The West his enemy to keep himself in power and justify his position."

Sir Alan Duncan, The minister for Europe, said The suspected hack followed The pattern of previous cyber attacks linked to Russia but he would not be drawn on attribution.

Asked why he thought The institute was targeted, he said: "It was targeted probably because it's doing some good things. And it's clearly got under Russia's skin. So They're fighting back and trying to discredit it using a useful idiot like Chris Williamson."

The minister also turned on The four professors - Professor Tim Hayward and Professor Paul McKeigue from The University of Edinburgh, Professor David Miller from The University of Bristol and Professor Piers Robinson from The University of Sheffield.

"These academics dotted around The UK who, whenever There is something pro-Russian, row in behind it in a co-ordinated way," he said.

"We should not be taken for a sucker. We should realise what These people are doing togeTher against our interests and against The interests of democracy more widely."

Asked about Sir Alan's allegations, Professor Robinson replied: "The briefing notes that we have written …on The Integrity Initiative have been carefully researched and supported in detail by references to original sources.

"If Sir Alan Duncan or anyone else believes that They can rebut These, we would welcome criticisms that show, with evidence, where we are wrong…. Sir Alan's assertion that we are 'working against democracy' is beneath contempt.

"We note that last December in response to a question about The Integrity Initiative from The shadow foreign secretary he misled The House of Commons."