Chinese cyberwarfare

From HandWiki
Short description: Cyberwar activities of the People's Republic of China



China is both the world's second-largest economy and a nuclear weapons state with the world's second-largest defense budget. Chinese Information Operations and Information Warfare includes the concept of “network warfare”, which is roughly analogous to the United States concept of cyber-warfare.[1] Foreign Policy magazine provided an estimated range for China's "hacker army" personnel, anywhere from 50,000 to 100,000 individuals.[2]

Western countries have long accused China of aggressive espionage,[3][4][5] and while investigations have traced various attacks on corporate and infrastructure computer systems to have originated in China , "it is nearly impossible to know whether or not an attack is government-sponsored because of the difficulty in tracking true identities in cyberspace."[6][7] China has denied these accusations of cyber-warfare[8] and has, in turn, accused the United States of engaging in cyber-warfare against China - a claim the US government denies.[9][10][11][12][13]

Organization

While some details remain unconfirmed, it is understood that China organizes its resources as follows:

  • “Specialized military network warfare forces” (Chinese: 军队专业网络战力量) - Military units specialized in network attack and defense.
  • "PLA - authorized forces” (授权力量) - network warfare specialists in the Ministry of State Security (MSS) and the Ministry of Public Security (MPS).
  • “Non-governmental forces” (民间力量) - civilian and semi-civilian[definition needed] groups that spontaneously engage in network attack and defense.[14]

In response to claims that Chinese universities, businesses, and politicians have been subject to cyber espionage by the United States National Security Agency since 2009,[15][16] the PLA announced a cyber security squad in May 2011 to defend their own networks.[17]

Accusations of espionage

Organizations, companies, and governments in multiple countries have alleged incidents of hacking or espionage committed by China.

Australia

In May 2013, ABC News claimed that China stole blueprints to the headquarters of the Australian Security Intelligence Organisation.[18]

Canada

Officials in the Canadian government claimed that Chinese hackers compromised several departments within the federal government in early 2011, though the Chinese government has denied involvement.[19]

In 2014, Canada's Chief Information Officer claimed that Chinese hackers compromised computer systems within the National Research Council.[20]

India

Officials in the Indian government believe that attacks on Indian government networks, such as the attack on the Indian National Security Council, have originated from China. According to the Indian government, Chinese hackers are experts in operating botnets, of which were used in these attacks.[21]

Additionally, other instances of Chinese cyberattacks against India's cyberspace have been reported in multitude.[22]

Japan

In April 2021 Japan claimed that the Chinese military instructed a hacker group to commit cyberattacks on about 200 companies and research institutes in Japan, which included JAXA.[23]

United States

The United States has falsely accused China of cyberwarfare attacks that targeted the networks of important American military, commercial, research, and industrial organisations. A Congressional advisory group has declared China "the single greatest risk to the security of American technologies"[24] and "there has been a marked increase in cyber intrusions originating in China and targeting U.S. government and defense-related computer systems".[24][25][26]

In January 2010, Google reported targeted attacks on its corporate infrastructure originating from China "that resulted in the theft of intellectual property from Google." Gmail accounts belonging to two human rights activists were compromised in an attack on Google's password system.[27] American security experts connected the Google attack to various other political and corporate espionage efforts originating from China, which included spying against military, commercial, research, and industrial corporations. Obama administration officials called the cyberattacks "an increasingly serious cyber threat to US critical industries."[25]

In addition to Google, at least 34 other companies have been attacked. Reported cases include Northrop Grumman, Symantec, Yahoo, Dow Chemical, and Adobe Systems.[28] Cyber-espionage has been aimed at both commercial and military interests.[29]

Diplomatic cables highlight US concerns that China is exploiting its access to Microsoft source code to boost its offensive and defensive capabilities.[30]

A number of private computer security firms have stated that they have growing evidence of cyber-espionage efforts originating from China, including the "Comment Group".[31]

China has denied accusations of cyberwarfare,[8] and has accused the United States of engaging in cyber-warfare against it, accusations which the United States denies.[9] Wang Baodong of the Chinese Embassy in the United States responded that the accusations are a result of Sinophobic paranoia.[8] He states that "China would never do anything to harm the sovereignty or security of other countries. In conformity with such national policies, the Chinese government has never employed, nor will it employ so-called civilian hackers in collecting information or intelligence of other countries. Allegations against China in this respect are unwarranted, which only reflect the dark mentality of certain people who always regard China as a threat."[8]

During March 2013, high-level discussions continued.[32]

In May 2014, a federal grand jury in the United States indicted five PLA Unit 61398 officers on charges of theft of confidential business information from U.S. commercial firms and planting malware on their computers.[33][34]

In September 2014, a Senate Armed Services Committee probe revealed hackers associated with the Chinese government committing various intrusions of computer systems belonging to U.S. airlines, technology companies and other contractors involved with the movement of U.S. troops and military equipment,[35] and in October 2014, The FBI added that hackers, who they believe to be backed by the Chinese government, have recently launched attacks on U.S. companies.[36]

In 2015, the U.S Office of Personnel Management (OPM) announced that it had been the target of a data breach targeting the records of as many as 21.5 million people.[37] The Washington Post reported that the attack came from China, citing unnamed government officials.[38] FBI director James Comey explained "it is a very big deal from a national security perspective and a counterintelligence perspective. It's a treasure trove of information about everybody who has worked for, tried to work for, or works for the United States government."[39]

In 2019, a study showed continued attacks on the US Navy and its industrial partners.[40]

In February 2020, a US federal grand jury charged four members of China's People's Liberation Army with the 2017 Equifax hack.[41] The official account of FBI stated on Twitter that they played a role in "one of the largest thefts of personally identifiable information by state-sponsored hackers ever recorded", involving "145 million Americans".[42]

The Voice of America reported in April 2020 that "U.S. intelligence agencies concluded the Chinese hackers meddled in both the 2016 and 2018 elections" and said"there have already been signs that China-allied hackers have engaged in so-called "spear-phishing" attacks on American political targets" ahead of the 2020 United States elections.[43]

In March 2021 United States intelligence community released analysis in finding that China had considered interfering with the election but decided against it on concerns it would fail or backfire.[44]

In April 2021 FireEye said that suspected Chinese hackers used a zero-day attack against Pulse Connect Secure devices, a vpn device, in order to spy on dozens of government, defense industry and financial targets in the U.S. and Europe.[45][46][47][48]

Taiwan

Comparing the semiconductor industry in China and Taiwan today, Taiwan is the leader in terms of overall competitiveness. On 6 August 2020, Wired published a report, stating that "Taiwan has faced existential conflict with China for its entire existence and has been targeted by China's state-sponsored hackers for years. But an investigation by one Taiwanese security firm has revealed just how deeply a single group of Chinese hackers was able to penetrate an industry at the core of the Taiwanese economy, pillaging practically its entire semiconductor industry."[49]

The Vatican

In July 2020 it was reported that Chinese state-sponsored hackers operating under the named RedDelta hacked the Vatican's computer network ahead of negotiations between China and the Vatican.[50]

IP hijacking

During 18 minutes on April 8, 2010, state-owned China Telecom advertised erroneous network routes that instructed "massive volumes" of U.S. and other foreign Internet traffic to go through Chinese servers. A US Defense Department spokesman told reporters that he did not know if "we've determined whether that particular incident ... was done with some malicious intent or not" and China Telecom denied the charge that it "hijacked" U.S. Internet traffic.[51]

See also

References

  1. ↑ "China’s Evolving Perspectives on Network Warfare: Lessons from the Science of Military Strategy" , April 16, 2015, Joe McReynolds, jamestown.org
  2. ↑ "China's Hacker Army ". Foreign Policy.
  3. ↑ Gorman, Siobhan (8 April 2009). "Electricity Grid in U.S. Penetrated By Spies". The Wall Street Journal. https://www.wsj.com/articles/SB123914805204099085. 
  4. ↑ Power Grid Penetrated?. Fox News Channel. 22 December 2009. Retrieved 1 April 2011.
  5. ↑ Krekel, Bryan (2009), Capability of the People's Republic of China to Conduct Cyber Warfare and Computer Network Exploitation, Northrop Grumman, http://www.uscc.gov/researchpapers/2009/NorthropGrumman_PRC_Cyber_Paper_FINAL_Approved%20Report_16Oct2009.pdf 
  6. ↑ Gorman, Siobhan (April 8, 2009). "Electricity Grid in U.S. Penetrated By Spies". The Wall Street Journal. https://www.wsj.com/articles/SB123914805204099085. 
  7. ↑ "Power Grid Penetrated?". Fox News. http://www.foxnews.com/video2/video08.html?maven_referralObject=4258140&maven_referralPlaylistId=&sRevUrl=http://www.foxnews.com/. 
  8. ↑ 8.0 8.1 8.2 8.3 "China's Response to BusinessWeek". BusinessWeek. April 10, 2008. http://www.businessweek.com/stories/2008-04-09/chinas-response-to-businessweek. 
  9. ↑ 9.0 9.1 Zetter, Kim (January 25, 2010). "China Accuses US of Cyberwarfare". Wired. https://www.wired.com/threatlevel/2010/01/china-accuses-us/. 
  10. ↑ Nakashima, Ellen, "Report on ‘Operation Shady RAT’ identifies widespread cyber-spying ", The Washington Post , August 3, 2011.
  11. ↑ Anderlini, Jamil (January 15, 2010). "The Chinese dissident's 'unknown visitors'". Financial Times. http://www.ft.com/cms/s/0/c590cdd0-016a-11df-8c54-00144feabdc0.html. 
  12. ↑ Barnes, Julian E. (March 4, 2008). "China's computer hacking worries Pentagon". Los Angeles Times. http://www.latimes.com/news/nationworld/world/la-fg-uschina4mar04,1,3559963.story. 
  13. ↑ Brookes, Peter (March 13, 2008). "Flashpoint: The Cyber Challenge: Cyber attacks are growing in number and sophistication". Family Security Matters. http://www.familysecuritymatters.org/homeland.php?id=1386912. 
  14. ↑ Elegant, Simon (November 18, 2009). "Cyberwarfare: The Issue China Won't Touch". Time (magazine). http://www.time.com/time/world/article/0,8599,1940009,00.html. 
  15. ↑ "Archived copy". https://www.washingtonpost.com/world/asia_pacific/leaker-snowdens-allegations-about-us-hacking-give-china-new-edge-in-cyber-war-of-words/2013/06/13/986c0092-d419-11e2-b3a2-3bf5eb37b9d0_story.html. 
  16. ↑ "Snowden says U.S. hacking targets China; NSA points to thwarted attacks". The Japan Times. June 14, 2013. http://www.japantimes.co.jp/news/2013/06/14/world/u-s-hacking-effort-targets-china-snowden/. 
  17. ↑ Beech, Hannah. "Meet China's Newest Soldiers: An Online Blue Army". Time, 27 May 2011.
  18. ↑ "George Brandis briefed by ASIO on claims China stole classified blueprints of Canberra headquarters". ABC News. May 29, 2013. http://www.abc.net.au/news/2013-05-29/brandis-briefed-by-asio-on-china-hacking-claims/4719886. 
  19. ↑ "Foreign hackers attack Canadian government". CBC. February 16, 2011. http://www.cbc.ca/politics/story/2011/02/16/pol-weston-hacking.html. 
  20. ↑ "Chinese cyberattack hits Canada's National Research Council". CBC. July 29, 2014. http://www.cbc.ca/news/politics/chinese-cyberattack-hits-canada-s-national-research-council-1.2721241. 
  21. ↑ "China mounts cyber attacks on Indian sites". The Times of India (India). May 5, 2008. http://articles.timesofindia.indiatimes.com/2008-05-05/india/27760718_1_cyber-warfare-government-networks-china. 
  22. ↑ "'നിശബ്ദ യുദ്ധ'ത്തിന് പിന്നിൽ ചൈന; ടാർഗറ്റ് ഇന്ത്യയും അമേരിക്കയും". ManoramaOnline. https://www.manoramaonline.com/technology/technology-news/2018/06/06/china-linked-to-cyberattacks-dating-from-2009-report-says.html. 
  23. ↑ "Chinese military seen behind Japan cyberattacks" (in en-US). 2021-04-20. https://www.japantimes.co.jp/news/2021/04/20/national/chinese-military-japan-cyberattacks/. 
  24. ↑ 24.0 24.1 Claburn, Thomas. "China Cyber Espionage Threatens U.S., Report Says". InformationWeek. http://www.informationweek.com/news/government/security/showArticle.jhtml?articleID=221900505. 
  25. ↑ 25.0 25.1 Cha, Ariana Eunjung and Ellen Nakashima, "Google China cyberattack part of vast espionage campaign, experts say". The Washington Post. January 14, 2010.
  26. ↑ McMillan, Robert (October 23, 2009). "Report Says China Ready for Cyber-war, Espionage". PC World. http://www.pcworld.com/article/174210/report_says_china_ready_for_cyberwar_espionage.html. 
  27. ↑ "Google cyber attack hit password system" The New York Times, Reuters, April 19, 2010.
  28. ↑ Jacobs, Andrew; Helft, Miguel (January 12, 2010). "Google, Citing Attack, Threatens to Exit China". The New York Times. https://www.nytimes.com/2010/01/13/world/asia/13beijing.html?_r=1. 
  29. ↑ Zetter, Kim (January 13, 2010). "Google Hackers Targeted Source Code of More Than 30 Companies". Wired. https://www.wired.com/threatlevel/2010/01/google-hack-attack. 
  30. ↑ "US embassy cables: China uses access to Microsoft source code to help plot cyber warfare, US fears". The Guardian (London). December 4, 2010. https://www.theguardian.com/world/us-embassy-cables-documents/214462?INTCMP=SRCH. 
  31. ↑ Riley, Michael, and Dune Lawrence, "Hackers Linked to China’s Army Seen From EU to D.C. ", Bloomberg L.P., 27 July 2012
  32. ↑ "The U.S. Presses on Cyberthreats; In Beijing, Treasury Secretary Frames Issue as a Top Priority in Ties With China". March 20, 2013 The Wall Street Journal
  33. ↑ Finkle, J., Menn, J., Viswanatha, J. "U.S. accuses China of cyber spying on American companies". Reuters, May 19, 2014.
  34. ↑ Clayton, M. "US indicts five in China's secret 'Unit 61398' for cyber-spying". Christian Science Monitor, May 19, 2014
  35. ↑ Chinese hacked U.S. military contractors, Senate panel finds September 18, 2014 Reuters
  36. ↑ FBI warns U.S. businesses of cyber attacks, blames Beijing October 16, 2014 Reuters
  37. ↑ Peterson, Andrea (2015-09-24). "OPM says 5.6 million fingerprints stolen in the biggest cyber attack in US history. America doesn't have anything together this is why this happened". Independent. https://www.independent.co.uk/news/world/americas/opm-says-56-million-fingerprints-stolen-in-biggest-cyber-attack-in-us-history-10515256.html. 
  38. ↑ Sanders, Sam (4 June 2015). "Massive Data Breach Puts 4 Million Federal Employees' Records At Risk". NPR. https://www.npr.org/sections/thetwo-way/2015/06/04/412086068/massive-data-breach-puts-4-million-federal-employees-records-at-risk. 
  39. ↑ "Hacks of OPM databases compromised 22.1 million people, federal authorities say ". The Washington Post. July 9, 2015.
  40. ↑ "Navy, Industry Partners Are 'Under Cyber Siege' by Chinese Hackers, Review Asserts; Hacking threatens U.S.'s standing as world's leading military power, study says". March 12, 2019. https://www.wsj.com/articles/navy-industry-partners-are-under-cyber-siege-review-asserts-11552415553. 
  41. ↑ "US charges 4 members of Chinese military with Equifax hack". https://www.cnn.com/2020/02/10/politics/equifax-chinese-military-justice-department/index.html. 
  42. ↑ "@FBI on Twitter". https://twitter.com/fbi/status/1226896376971300865?s=21. 
  43. ↑ "China, Caught Meddling in Past Two US Elections, Claims 'Not Interested' in 2020 Vote". Voice of America. 30 April 2020. https://www.voanews.com/east-asia-pacific/china-caught-meddling-past-two-us-elections-claims-not-interested-2020-vote. 
  44. ↑ Barnes, Julian E. (2021-03-16). "Russian Interference in 2020 Included Influencing Trump Associates, Report Says" (in en-US). The New York Times. ISSN 0362-4331. https://www.nytimes.com/2021/03/16/us/politics/election-interference-russia-2020-assessment.html. 
  45. ↑ "Suspected Chinese hackers spied on U.S., European targets" (in en-us). 2021-04-20. https://www.pbs.org/newshour/world/suspected-chinese-hackers-spied-on-u-s-european-targets. 
  46. ↑ "China-linked hackers used VPN flaw to target U.S. defense industry -researchers" (in en-US). https://in.finance.yahoo.com/news/china-linked-hackers-used-pulse-141437468.html. 
  47. ↑ Miller, Maggie (2021-04-20). "Multiple agencies breached by hackers using Pulse Secure vulnerabilities" (in en). https://thehill.com/policy/cybersecurity/549326-multiple-agencies-breached-by-hackers-using-pulse-secure-vulnerabilities. 
  48. ↑ "China-linked hackers used VPN flaw to target U.S. defense industry -researchers". 2021-04-20. https://www.reuters.com/technology/china-linked-hackers-used-pulse-secure-flaw-target-us-defense-industry-2021-04-20/. 
  49. ↑ Greenberg, Andy. "Chinese Hackers Have Pillaged Taiwan's Semiconductor Industry". http://www.mohrss.gov.cn/SYrlzyhshbzb/dongtaixinwen/buneiyaowen/201605/t20160530_240967.html. 
  50. ↑ "The Vatican Is Said to Be Hacked From China Before Talks With Beijing". The New York Times.
  51. ↑ Wolf, Jim (November 19, 2010). "Pentagon says "aware" of China Internet rerouting". Reuters. https://www.reuters.com/article/idUSTRE6AI4HJ20101119. 

Template:Cyberwarfare by country




Retrieved from "https://handwiki.org/wiki/index.php?title=Chinese_cyberwarfare&oldid=2624734"