There was never any indication she was wrapped up in any shady cyberespionage work. Until yesterday, when the Obama regime banned her company, ZorSecurity (also known as Esage Lab), from doing business in or entering America. Her company was accused of providing Russia’s chief intelligence agency, the GRU, with “technical research and development” in the White House’s long list of sanctions outlined yesterday in response to this year’s digital broadside on American democracy. Whilst it’s unclear just how Shevchenko’s company helped the GRU carry out the infamous hack of the Democratic National Committee (DNC) or other bodies involved in this fall’s election, if at all, the implication is there for all to see.
Shevchenko is furious. Not only that, she believes she’s been made a scapegoat in the digital feud between the U.S. and Russia, and wrongly implicated as a malefactor in one of the biggest cyberattacks in history.
The “technical research” the White House alleged she provided the GRU could include her stash of previously-undisclosed and unpatched vulnerabilities, so-called zero-days. Such software bugs, accompanied by an exploit to hack them and the underlying computer, are worth upwards of $1 million, one reason why Shevchenko plies her vast technical abilities to hunt them. She was even credited by the Department of Homeland Security for helping find flaws in critical energy management software made by Schneider Electric in March 2015. She’s was also rewarded by the Zero Day Initiative (ZDI), then owned by U.S. tech giant HP, for uncovering two vulnerabilities in Microsoft products in 2014, so they could be fixed by the software developer. Her work has been featured in noted security industry publications too, in particular Virus Bulletin.
But Shevchenko, who claimed ZorSecurity is now defunct, is baffled at seeing her company’s name on the White House list, refuting any claims she ever did business with the Russian government. She had no clue she was on the list until the media enquiries started pouring in over the last 24 hours.