Working in the aggressor’s market: How does Imperva protect an important Russian business?
August 30, 2022
0
As he reported channel 24, cybersecurity enthusiast Leonid Andreev was the first to draw attention to it. In his blog, he talked about the fact that the American
As he reported channel 24, cybersecurity enthusiast Leonid Andreev was the first to draw attention to it. In his blog, he talked about the fact that the American company Imperva continues to provide protection to a number of Russian currency exchangers.
We decided to enlist the help of Molfar, the Ukrainian OSINT community engaged in military investigations, fact-checking, debriefing and analytics. They did extensive study and learned a lot of interesting things about Imperva’s work in Russia.
How Imperva left Russia and did not come
So let’s start from the beginning. On March 7, 2022, Imperva announced the suspension of new sales and operations in Russia and Belarus. The company notified existing customers of this and “disabled the point of presence in Moscow”, possibly meaning closing the office there.
As of July 25, 2022, 725 domains on Russian servers use Imperva Bot Detection and Mitigation technology. In addition, 429 domains are hosted using Imperva cloud technologies.
Russian companies continue to use Imperva services and technologies / Molfar screenshots
According to Webtechsurvey, 266 domains from Russia use Imperva technology. These are data as of July 21.
During the investigation, Imperva probably did not revoke its trademark registration in Russia.
It looks like Imperva plans to “wait for the hard days” and continue working in Russia / Screenshot Molfar
Famous brands using Imperva technologies in Russia
PepsiCo – domain of the Russian branch of pepsico.ru (in March 2022 they announced the end of business and in April began to look for ways to stay in the Russian market using Hosting as of 07/17/2022) provider and CDN components, domain is located on Russian servers ;
master of sports – sportmaster.ru, the sporting goods store using the Hosting Provider component and the CDN component from 22.07.2022;
Decathlon – domain of the French sporting goods store decathlon.ru;
Coral – the domain and subdomain agency.coral.ru of the travel company coral.ru;
epson – a Russian branch of a manufacturer of printers and printing equipment in Russia from 07/25/2022 using Imperva protection technology;
Paysecure – the developer and integrator of the payment processing service uses technology in the field of payments269.paysecure.ru;
Yves Rocher – domain of the online cosmetics shop yves-rocher.ru.
How does Russian support for Imperva work?
Molfar specialists also checked the operation of the Russian support of Imperva. Imperva support responded in Russian to a request to connect services for a Russian company. The company reported that it does not work with businesses in Russia.
Partners of the company in Russia
In addition to providing Russian companies with its own services and technologies, Imperva also cooperates closely with a number of Russian companies and companies that continue to operate on the territory of the aggressor country.
Sberbank
According to Molfar, the Russian Sberbank is likely a permanent client of the company. In February 2021, Sberbank allocated $ 500 million to IXcellerate, cooperating with Imperva. Also, in April 2020, Sberbank opened a tender for technical support of Imperva for 518 thousand rubles, and in October 2020 for 390 thousand rubles.
IXcellerate
In March 2018, Imperva partnered with Moscow-based data processing operator IXcellerate through the FlexProtect (formerly Incapsula) program to increase its presence in Russia using IXcellerate data centers.
As of February 19, 2021, IXcellerate was still a partner with Imperva, and as of July 21, 2022, according to the Isdown.app service, Imperva has not blocked its point of presence in Russia, possibly according to its components. Presence of IXcellerate.
Imperva continues to operate in Russia / Screenshot Molfar
IXcellerate customers include the following companies:
Alpha Insurance,
Qrator,
Nestle,
Dear VDS,
Tencent,
webinar,
huawei,
nvidia,
obs,
soft line,
finisher,
China Agricultural Bank,
Antalya,
shelf space,
NTT,
black,
Arelion,
magnet,
contour,
hh
netwell
The client provides Imperva solutions for Russian companies, including the country’s largest banks. According to ImportGenius, the delivery is confirmed by a bill of lading. As of July 25, 2022, Imperva is listed as a service provider on the Netwell website.
sweat data
The American analytics and database services provider uses Imperva’s SecureSphere Database Security technology for its customers. Teradata has an office in Moscow. As of July 25, 2022, Imperva is listed as a service provider on the Teradata website.
Puzzle Systems
Puzzle Systems, the IT solutions integrator headquartered in Kazan, also states that it uses Imperva technologies.
The company offers a wide range of services: guaranteeing the security of web applications, content caching, protection against DDoS attacks, cloud storage security, data security and risk protection. All this should have stopped working by March, and the impact on Russian trade should have been enormous.
Although Imperva claims that it is not currently cooperating with Russian companies (at least in terms of new deals), it continues to operate on the territory of the attacker country and sells its services and technologies to banks, exchanges and providers.
John Wilkes is a seasoned journalist and author at Div Bracket. He specializes in covering trending news across a wide range of topics, from politics to entertainment and everything in between.