FaceApp

FBI Warns That FaceApp and Other Apps Developed in Russia Are ‘Potential Counterintelligence Threats’

The viral app concerned senators due to the amount of data that it collected, including facial scans of users.

As FaceApp took the internet by storm with its face-aging feature this summer, Senate Minority Leader Chuck Schumer (D-N.Y.) wondered: What are the risks posed by an app based in Russia that requires access to large amounts of user data?

He sent a letter to the FBI in July requesting a review of the app’s potential threats to Americans’ data security, and on Monday, he published the bureau’s response. In a Nov. 25 letter, Jill Tyson, the assistant director of the FBI’s Office of Congressional Affairs, wrote that the FBI considers nearly any app developed in Russia to be a “potential counterintelligence threat.”

“The FBI considers any mobile application or similar product developed in Russia, such as FaceApp, to be a potential counterintelligence threat, based on the data the product collects, its privacy and terms of use policies, and the legal mechanisms to the Government of Russia that permit access to data within Russia’s borders,” Tyson wrote.

She added that Russia’s intelligence agencies, including the Russian Federal Security Service (FSB), have the ability to obtain online communications and telephone records through “robust cyber exploitation” operations.

“In other words, the FSB can remotely access all communications and servers on Russian networks without making a request to [internet service providers],” Tyson wrote.

On Monday, Schumer took the Senate floor to urge Americans to consider the potential ramifications of downloading apps produced in Russia. FaceApp has previously said that it does not store any data in Russia, where its research and development team is based, and does not share data with third parties.

“I strongly urge all Americans to consider deleting apps like FaceApp immediately and to proceed with extreme caution when downloading apps developed in foreign countries that are known adversaries,” Schumer said. “The personal data FaceApp collects from a user’s device could end up in the hands of Russian intelligence services. It is simply not worth the risk.”

In the past month, Schumer has been among several senators who have pushed for a national security review of TikTok, the video app owned by Chinese company ByteDance. (The company is currently facing scrutiny from the Department of Commerce).

Schumer connected the FaceApp saga to continuing efforts by Russian intelligence agencies to interfere in American democracy through influence campaigns and cyber attacks.

“We should be doing everything in our power to stop it and prevent that from happening, from hardening our election infrastructure to ensuring our military has the cyber authority needed to respond to attacks, to passing tough new sanctions to deter any foreign power from interfering in our elections,” Schumer said, urging McConnell to include election security measures in the Senate’s annual defense spending bill.

About the Author

Haley Samsel is an Associate Content Editor for the Infrastructure Solutions Group at 1105 Media.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West

Featured Cybersecurity

Webinars

New Products

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises. 3

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening. 3

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities 3