The Biden administration on Thursday will announce plans to bar the sale of antivirus software made by Russia's Kaspersky Labs in the United States, a person familiar with the matter said, citing the firm's large U.S. customers including critical infrastructure providers and state and local governments.
The company's close ties to the Russian government were found to pose a critical risk, the person said, adding that the software's privileged access to a computer's systems could allow it to steal sensitive information from American computers, install malware or withhold critical updates.
The sweeping new rule, using broad powers created by the Trump administration, will be coupled with another move to add the company to a trade restriction list, according to two other people familiar with the matter, dealing a blow to the firm's reputation that could hammer its overseas sales.
The plan to add the cybersecurity company to the entity list, which effectively bars a company's U.S. suppliers from selling to it, and the timing and details of the software sales prohibition, have not been previously reported.
A spokesperson for the Commerce Department declined to comment, while Kaspersky Lab and the Russian Embassy did not respond to requests for comment. Previously, Kaspersky has said that it is a privately managed company with no ties to the Russian government.
The moves show the administration is trying to stamp out any risks of Russian cyberattacks stemming from Kaspersky software and keep squeezing Moscow as its war effort in Ukraine has regained momentum and as the United States has run low on fresh sanctions it can impose on Russia.
From Apple bouncing back, to what the Pope thinks about bots,
It also shows the Biden administration is harnessing a powerful new authority that allows it to ban or restrict transactions between U.S. firms and internet, telecom and tech companies from "foreign adversary" nations like Russia and China.
The tools are largely untested.
Former President Donald Trump used them to try to bar Americans from using Chinese social media platforms TikTok and WeChat, but federal courts halted the moves.
The new restrictions on inbound sales of Kaspersky software, which will also bar downloads of software updates, resales and licensing of the product, kick in on Sept. 29, 100 days after publication, to give businesses time to find alternatives. New U.S. business for Kaspersky will be blocked 30 days after the restrictions are announced.
Sales of white-labeled products — that integrate Kaspersky into software sold under a different brand name — will also be barred, the source said, noting that the Commerce Department will notify the companies before taking enforcement action against them.
It is less clear what impact the entity listing will have on Kaspersky, whose Russian business is already subject to sweeping U.S. export restrictions over Ukraine which make it almost impossible for any U.S.-made items other than food or medical equipment to reach Russia.
If the Commerce Department adds foreign units of Kaspersky to the entity list that purchase significant inputs from the United States, the move could crimp its supply chain. If it only adds the Russian entity, the impact will be largely reputational.
Reuters
More about:
