# US agencies bought forensics tools from Russian-linked firm supplying FSB DoJ alleges Virginia-based Oxygen Forensics concealed Russian ownership while selling to DHS and Pentagon - **Source:** [www.theregister.com - Articles](https://www.theregister.com) - **Published:** 2026-09-24 - **Topic:** [Business](https://brifing.si/c/business) - **Original article:** - **On Brifing:** https://brifing.si/s/e463aad3-1c77-4756-af48-6ef98c63e3f2 ## Dual-use software supply chain Oxygen Forensics sold digital investigation tools to multiple US defense and homeland security agencies while allegedly being controlled by Russian nationals. The same development team in Russia reportedly supplied similar software to Russian security agencies like FSB through a different company. This created a parallel supply chain where identical forensic capabilities were delivered to adversarial governments. ## Concealed ownership structure Prosecutors allege five Russian owners masked their control through a Cyprus holding company while making key decisions. After 2022 Ukraine sanctions, they removed themselves from corporate filings but retained financial control, including CEO compensation approval and payment veto power. The Virginia entity presented itself as fully American to government buyers. ## Critical government customers Oxygen's US clients included DHS investigative units, the Secret Service's forensics institute, and Department of Defense components. Meanwhile, its Russian counterpart MKO Systems reportedly sold to FSB, Investigative Committee and Interior Ministry. The DoJ emphasizes this didn't involve malware but shows identical tools used by opposing security services. ## Sanctions-era deception As sanctions tightened post-2022, the alleged concealment intensified. CEO Reiber reportedly warned owners about media exposure jeopardizing a NCFI contract, which was ultimately awarded in 2024. Until March 2026, Reiber allegedly falsely claimed no Russian involvement in development, while prosecutors say Russian teams actually built and managed the software. ## Law enforcement actions Authorities arrested CEO Reiber in Idaho and developer Davydov at Heathrow Airport en route to Istanbul. The US seized 57 domains, corporate accounts and infrastructure. Charges focus on wire fraud conspiracy for allegedly misleading government buyers about Russian control and development locations, not software functionality. ## Contracting vulnerabilities The case reveals gaps in US government vendor vetting, as Oxygen maintained contracts despite media inquiries about Russian ties. Prosecutors highlight how ownership structures can obscure foreign control, with the Cyprus entity providing plausible deniability while Russian principals retained actual decision-making authority. ## Industry implications The charges could prompt stricter scrutiny of software supply chains, especially for forensic tools used in sensitive investigations. The dual-use nature of such technology - equally valuable to allies and adversaries - creates unique security challenges that current procurement processes may not adequately address. ## Legal consequences Reiber and Davydov face up to 20 years if convicted, with the DoJ seeking Davydov's extradition from UK. The case establishes precedent for prosecuting sanctions evasion through corporate structures in the tech sector, where software development locations and ownership can be deliberately obscured. ## Sources covering this story - https://www.theregister.com/software/2026/09/24/doj-uncle-sam-bought-forensics-software-from-same-russian-operation-supplying-fsb/5298774 — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._