Valdosta Daily Times

Top News

February 20, 2013

U.S. ready to strike back against China cyberattacks

WASHINGTON — As public evidence mounts that the Chinese military is responsible for stealing massive amounts of U.S. government data and corporate trade secrets, the Obama administration is eyeing fines and other trade actions it may take against Beijing or any other country guilty of cyberespionage.

According to officials familiar with the plans, the White House will lay out a new report Wednesday that suggests initial, more-aggressive steps the U.S. would take in response to what top authorities say has been an unrelenting campaign of cyberstealing linked to the Chinese government. The officials spoke on condition of anonymity because they were not authorized to speak publicly about the threatened action.

The White House plans come after a Virginia-based cybersecurity firm released a torrent of details Monday that tied a secret Chinese military unit in Shanghai to years of cyberattacks against U.S. companies. After analyzing breaches that compromised more than 140 companies, Mandiant has concluded that they can be linked People’s Liberation Army’s Unit 61398.

Military experts believe the unit is part of the People’s Liberation Army’s cyber-command, which is under the direct authority of the General Staff Department, China’s version of the Joint Chiefs of Staff. As such, its activities would be likely to be authorized at the highest levels of China’s military.

The release of Mandiant’s report, complete with details on three of the alleged hackers and photographs of one of the military unit’s buildings in Shanghai, makes public what U.S. authorities have said less publicly for years. But it also increases the pressure on the U.S. to take more forceful action against the Chinese for what experts say has been years of systematic espionage.

“If the Chinese government flew planes into our airspace, our planes would escort them away. If it happened two, three or four times, the president would be on the phone and there would be threats of retaliation,” said former FBI executive assistant director Shawn Henry. “This is happening thousands of times a day. There needs to be some definition of where the red line is and what the repercussions would be.”

Henry, now president of the security firm CrowdStrike, said that rather than tell companies to increase their cybersecurity the government needs to focus more on how to deter the hackers and the nations that are backing them.

James Lewis, a cybersecurity expert at the Center for Strategic and International Studies, said that in the past year the White House has been taking a serious look at responding to China, adding that “this will be the year they will put more pressure on, even while realizing it will be hard for the Chinese to change. There’s not an on-off switch.”

The Chinese government, meanwhile, has denied involvement in the cyber-attacks tracked by Mandiant. Instead, the Foreign Ministry said that China, too, is a victim of hacking, some of it traced to the U.S. Foreign Ministry spokesman Hong Lei cited a report by an agency under the Ministry of Information Technology and Industry that said in 2012 alone that foreign hackers used viruses and other malicious software to seize control of 1,400 computers in China and 38,000 websites.

“Among the above attacks, those from the U.S. numbered the most,” Hong said at a daily media briefing, lodging the most specific allegations the Chinese government has made about foreign hacking.

Cybersecurity experts say U.S. authorities do not conduct similar attacks or steal data from Chinese companies, but acknowledge that intelligence agencies routinely spy on other countries.

China is clearly a target of interest, said Lewis, noting that the U.S. would be interested in Beijing’s military policies, such as any plans for action against Taiwan or Japan.

In its report, Mandiant said it traced the hacking back to a neighborhood in the outskirts of Shanghai that includes a white 12-story office building run by the PLA’s Unit 61398.

Mandiant said there are only two viable conclusions about the involvement of the Chinese military in the cyberattacks: Either Unit 61398 is responsible for the persistent attacks or they are being done by a secret organization of Chinese speakers with direct access to the Shanghai telecommunications infrastructure who are engaged in a multi-year espionage campaign being run right outside the military unit’s gates.

“In a state that rigorously monitors Internet use, it is highly unlikely that the Chinese government is unaware of an attack group that operates from the Pudong New Area of Shanghai,” the Mandiant report said, concluding that the only way the group could function is with the “full knowledge and cooperation” of the Beijing government.

The unit “has systematically stolen hundreds of terabytes of data from at least 141 organizations,” Mandiant wrote. A terabyte is 1,000 gigabytes. The most popular version of the new iPhone 5, for example, has 16 gigabytes of space, while the more expensive iPads have as much as 64 gigabytes of space. The U.S. Library of Congress’ 2006-2010 Twitter archive of about 170 billion tweets totals 133.2 terabytes.

“At some point we do have to call the Chinese out on this,” said Michael Chertoff, Homeland Security secretary under President George W. Bush and now chairman of the Chertoff Group, a global security firm. “Simply rolling over and averting our eyes, I don’t think is a long-term strategy.”

Richard Bejtlich, the chief security officer at Mandiant, said the company decided to make its report public in part to help send a message to both the Chinese and U.S. governments.

“At the government level, I see this as a tool that they can use to have discussions with the Chinese, with allies, with others who are concerned about this problem and have an open dialogue without having to worry about sensitivities around disclosing classified information,” Bejtlich said. “This problem is overclassified.”

He said the release of an unclassified report that provides detailed evidence will allow authorities to have an open discussion about what to do.

Mandiant’s report is filled with high-tech details and juicy nuggets that led to its conclusion, including the code names of some of the hackers, like Ugly Gorilla, Dota and SuperHard, and that Dota appears to be a fan of Harry Potter because references to the book and movie character appear as answers to his computer security questions.

The White House would not comment on the report expected Wednesday.

“We have repeatedly raised our concerns at the highest levels about cybertheft with senior Chinese officials, including in the military, and we will continue to do so,” said Caitlin Hayden, spokeswoman for the National Security Council. “The United States and China are among the world’s largest cyber actors, and it is vital that we continue a sustained, meaningful dialogue and work together to develop an understanding of acceptable behavior in cyberspace.”

Sen. Dianne Feinstein, D-Calif., chairman of the Senate Intelligence Committee, said the report reinforces the need for international agreements that prohibit cybercrimes and have a workable enforcement mechanism.

———

Associated Press writers Christopher Bodeen, Gillian Wong, Charles Hutzler and Joe McDonald contributed to this report.

For more on this story and other local news, subscribe to The Valdosta Daily Times e-Edition, or our print edition

Text Only
Top News
  • Boyfriend Slaying_Rich(1).jpg Jurors deadlock on Jodi Arias penalty; retrial set

    Jurors who spent five months determining Jodi Arias’ fate couldn’t decide whether she should get life in prison or die for murdering her boyfriend, sending prosecutors back to the drawing board to rehash the shocking case of sex, lies and violence to another 12 people.

    May 24, 2013 1 Photo

  • Lt. Gov. visits Valdosta

    Lt. Governor Casey Cagle delivered a message of optimism and preference for prudent investments for Valdosta and Lowndes County Thursday morning, which he is confident will pull Georgia out of recession, build jobs and launch Valdosta into a new business heyday.

    May 24, 2013

  • I-5 Bridge Collapse_Rich.jpg I-5 bridge collapses in Washington state

    An Interstate 5 bridge over a river north of Seattle collapsed Thursday evening, dumping vehicles and people into the water, the Washington State Patrol said.

    May 24, 2013 1 Photo

  • AP6205241265 copy.jpg Today in History for Friday, May 24, 2013

    Today is Friday, May 24, the 144th day of 2013. There are 221 days left in the year.

    May 24, 2013 1 Photo

  • Parents fuming over locked doors at graduation

    Several parents of Spelman College graduates are furious after locked doors prevented them from seeing their children’s commencement.

    May 23, 2013

  • Nepal Everest Octagen.jpg Octogenarians race to be oldest Everest climber

    An 80-year-old Japanese extreme skier who climbed Mount Everest five years ago, but just missed becoming the oldest man to reach the summit, is back on the mountain to make another attempt at the title.

    May 23, 2013 1 Photo

  • Wunderkind Dropouts.jpg When is it OK for wunderkinds to drop out of school?

    It's one thing to say tech geniuses don't need degrees. After all, Bill Gates, Steve Jobs and Mark Zuckerberg all dropped out of college. But now we've got David Karp, who doesn't even have a high school diploma.

    May 23, 2013 1 Photo

  • Military Sexual Assault.jpg House panel moves to curb military sexual assaults

    Members of a House panel angry over the growing epidemic of sexual assaults in the military took a key step toward tackling the problem.

    May 23, 2013 1 Photo

  • IRS Political Groups.jpg Broke no laws, IRS official says — then takes 5th

    At the center of a political storm, an Internal Revenue Service supervisor whose agents targeted conservative groups swore Wednesday she did nothing wrong, broke no laws and never lied to Congress.

    May 23, 2013 1 Photo

  • Boston Marathon Shooting.jpg Man shot to death while questioned in Boston probe

    A Chechen immigrant was shot to death by authorities in central Florida early Wednesday after he turned violent while being questioned about his ties to one of the Boston Marathon bombing suspects, officials said.

    May 23, 2013 1 Photo

Top News
Community Calendar
Loading…
Events by eviesays.com
Poll

What’s your best advice for graduates?

Go to college or trade school immediately.
Work for a while then seek further education.
Enter the work force.
Intern, ensure an interest is something you can do.
     View Results