Loading...

US, Allies Accuse China of Backing Cyber Attacks Worldwide

July 19, 2021 by Dan McCue
US, Allies Accuse China of Backing Cyber Attacks Worldwide
In this Jan. 28, 2020, file photo, a Microsoft computer is among items displayed at a Microsoft store in suburban Boston. The Biden administration on Monday, July 19, 2021, blamed China for a hack of Microsoft Exchange email server software that compromised tens of thousands of computers around the world earlier in the year. (AP Photo/Steven Senne)

The United States, NATO and several allies collectively called out China on Monday for a series of malicious cyber- and ransomware attacks, including a March attack that exploited a flaw in Microsoft’s Exchange Server.

Monday’s announcement, which followed a conference call with White House reporters Sunday night, marks the first time NATO, a military alliance formed to confront the threat posed by the former Soviet Union, has formally condemned China for its allegedly malicious cyber activities.

According to the U.S. and its allies, China’s Ministry of State Security is using contract hackers to conduct the attacks, many of which are being done for profit, including via ransomware.

The March attack using the Exchange flaw crippled tens of thousands of computers around the world.

“We’ve raised our concerns about both the Microsoft incident and the [China’s] broader malicious cyber activity with senior [Chinese] government officials, making clear that these actions threaten security, confidence, and stability in cyberspace,” a senior White House official said Sunday night. 

As part of Monday’s announcement, the Justice Department unveiled criminal charges against four Ministry of State Security hackers for a “multiyear campaign targeting foreign governments and entities in key sectors, including maritime, aviation, defense, education, and health care in a least a dozen countries.”

Microsoft had previously said it believed a hacking group known as HAFNIUM, a Chinese-state sponsored hacking group, was exploiting the vulnerabilities in the program. 

U.S. officials had said they were working to attribute the hack, which was first detected in March. Hackers used zero-day exploits to attack versions of Microsoft’s Exchange Server application and hack into victims’ email accounts.

The White House official attributed the delay between the March event and today’s announcement to the desire to definitively nail down who the bad actors were and to coordinate a response — “a collective defense partnership,” with global partners.

“[China’s] pattern of irresponsible behavior in cyberspace is inconsistent with its stated objective of being seen as a responsible leader in the world,” the official said. 

“Countries around the world are making it clear that concerns regarding the PRC’s malicious cyber activity is bringing them together to call out this activity, promote network defense and cybersecurity, and act to disrupt threats to our economies and national security,” the official added.

Despite its concern over China’s alleged cyber activities, the White House official said the U.S. is holding off taking specific actions to punish the Chinese government, but  leaving the door open to taking action in the future.

“The U.S. and our allies and partners are not ruling out further actions to hold [China] accountable,” the official said. “We are putting forward a common cyber approach with our allies and laying down clear expectations on how responsible nations behave in cyberspace.”

In The News

Health

Voting

Cybercrime

May 18, 2022
by Dan McCue
Federal Agencies Told to Act Quickly to Turn Back Cyberthreat

WASHINGTON — The entity charged with protecting federal agencies from bad cyber actors issued a rare emergency directive Thursday, warning... Read More

WASHINGTON — The entity charged with protecting federal agencies from bad cyber actors issued a rare emergency directive Thursday, warning they should quickly take steps to protect themselves from vulnerabilities found in VMware. VMware is a cloud computing and virtualization technology company headquartered in Palo Alto,... Read More

May 6, 2022
by Madeline Hughes
Cybercrime Tracking Bill Signed Into Law

WASHINGTON — The Department of Justice can now get a handle on the number of cybercrimes happening in the U.S.... Read More

WASHINGTON — The Department of Justice can now get a handle on the number of cybercrimes happening in the U.S. after President Joe Biden signed a bill into law Thursday granting the department the ability to track crimes that have become increasingly prevalent in recent years.... Read More

May 4, 2022
by Tom Ramstack
Russian Cyberthreats Create Alarms at Senate Homeland Security Hearing

WASHINGTON — Lawmakers at a Senate hearing renewed warnings Wednesday that Russian cyberattacks remain a serious threat as the United... Read More

WASHINGTON — Lawmakers at a Senate hearing renewed warnings Wednesday that Russian cyberattacks remain a serious threat as the United States and allies continue their support for Ukraine. In the latest move, the European Union announced Tuesday it would end all oil imports from Russia in... Read More

April 26, 2022
by Tom Ramstack
FBI Warns of Ransomware Attackers Using Sophisticated Program

WASHINGTON — The FBI is warning that computer hackers most likely based in Russia have compromised at least 60 organizations... Read More

WASHINGTON — The FBI is warning that computer hackers most likely based in Russia have compromised at least 60 organizations since last month with a new generation of a sophisticated programming language.  The targets of the ransomware attacks have included a Swiss airport management company and... Read More

April 22, 2022
by Tom Ramstack
FBI Warns Farmers to Beware Ransomware Cyberattacks

WASHINGTON — The FBI issued a warning this week to farm cooperatives that ransomware attackers are increasingly trying to disrupt... Read More

WASHINGTON — The FBI issued a warning this week to farm cooperatives that ransomware attackers are increasingly trying to disrupt their operations during the planting and harvest seasons. The FBI announcement was one of several warnings about cyberattacks that are becoming more shrill as Russia continues... Read More

April 7, 2022
by Madeline Hughes
Warning of Cyberattacks on Backup Power Devices

WASHINGTON — There’s a new warning about cyberattacks on uninterruptible power supplies — essentially the backup batteries that allow near-continuous... Read More

WASHINGTON — There’s a new warning about cyberattacks on uninterruptible power supplies — essentially the backup batteries that allow near-continuous operation when there is a power failure. The Federal Communications Commission issued this warning Thursday to communications companies that often use these backups to keep the... Read More

News From The Well