U.S. firm blames China's military for hacking attacks
China says claims 'groundless'
The Associated Press
Posted: Feb 19, 2013 5:41 AM ET
Last Updated: Feb 19, 2013 11:07 PM ET
Cyberattacks that stole massive amounts of information from military contractors, energy companies and other key industries in the U.S. and elsewhere have been traced to the doorstep of a Chinese military unit, a U.S. security firm alleged Tuesday.
China's Foreign Ministry dismissed the report as "groundless," and the Defense Ministry denied any involvement in hacking attacks.
China has frequently been accused of hacking, but the report by Virginia-based Mandiant Corp. contains some of the most extensive and detailed accusations to date linking its military to a wave of cyberspying against U.S. and other foreign companies and government agencies.
Mandiant said it traced the hacking back to a neighborhood in the outskirts of Shanghai that includes a drab, white 12-storey office building run by "Unit 61398" of the People's Liberation Army.
'The Chinese government has always firmly combated such activities and the Chinese military has never supported any form of hacking activity.'—China Defence Ministry
The unit "has systematically stolen hundreds of terabytes of data from at least 141 organizations," Mandiant wrote. By comparison, the U.S. Library of Congress 2006-2010 Twitter archive of about 170 billion tweets totals 133.2 terabytes.
"From our observations, it is one of the most prolific cyberespionage groups in terms of the sheer quantity of information stolen," the company said. It added that the unit has been in operation since at least 2006.
Mandiant said it decided that revealing the results of its investigation was worth the risk of the hackers changing their tactics and becoming even more difficult to trace.
"It is time to acknowledge the threat is originating in China, and we wanted to do our part to arm and prepare security professionals to combat that threat effectively," it said.
In a statement faxed to The Associated Press, the Defence Ministry firmly rejected any involvement in hacking, saying Chinese law forbids all activities harming internet security.
"The Chinese government has always firmly combated such activities and the Chinese military has never supported any form of hacking activity," the ministry said. "Statements to the effect that the Chinese military takes part in internet attacks are unprofessional and are not in accordance with the facts."
Chinese Foreign Ministry spokesman Hong Lei did not directly address the claims, but when questioned on the report Tuesday, he said he doubted the evidence would withstand scrutiny.
"To make groundless accusations based on some rough material is neither responsible nor professional," Hong told reporters at a regularly scheduled news conference.
China says it is the victim
Reiterating a standard China government response on hacking claims, Hong said China itself is a major victim of such crimes, including attacks originating in the United States.
"As of now, the cyberattacks and cybercrimes China has suffered are rising rapidly every year," Hong said.
Mandiant said its findings led it to alter the conclusion of a 2010 report it wrote on Chinese hacking, in which it said it was not possible to determine the extent of government knowledge of such activities.
"The details we have analyzed during hundreds of investigations convince us that the groups conducting these activities are based primarily in China and that the Chinese government is aware of them," the company said in a summary of its latest report.
It said the hacking was traced to the 2nd Bureau of the People's Liberation Army General Staff's 3rd Department, most commonly known as unit 61398, in the Shanghai suburbs.
China's Defence Ministry did not immediately respond to faxed questions about the report, although it has in the past labelled such allegations as groundless and irresponsible, and has demanded that evidence be presented.
News of the report spread Tuesday on the Chinese internet, with many commentators calling it an excuse for the U.S. to impose greater restrictions to contain China's growing technological prowess.
Graham Cluley, a British cybersecurity expert who was not involved in Mandiant's research, said people in the computer industry believe China's government is behind such attacks but have been unable to confirm the source.
"None of us would be very surprised or be uncomfortable saying we strongly suspect the Chinese authorities are involved in spying this way," said Cluley, a senior technology consultant for security firm Sophos in Britain.
"I think we are seeing a steady escalation" of sophistication in hacking, Cluley said. "This is really the new era of cybercrime. We've moved from kids in their bedroom and financially motivated crime to state-sponsored cybercrime, which is interested in stealing secrets and getting military or commercial advantage."
Share Tools
Top News Headlines
- Neil Macdonald: Washington's obsession with leakers
- Julian Assange and Edward Snowden are just the most prominent targets in an all-out legal and propaganda campaign that America's security apparatus is mounting against leakers everywhere, Neil Macdonald writes. more »
- Who's who in the Senate expense controversy
- Keeping track of the names popping up in the ongoing Senate expenses controversy — from the investigators to the four senators themselves — could be a difficult task for even the most seasoned political observers. more »
- How open is Ottawa's new 'open data' website?
- Treasury Board President Tony Clement is touting the federal government's revamped data portal as a "new natural resource." But that online window for previously published data arrives at the same time the government faces controversy over just how open it really is. more »
- 2 men jailed in Dominican wedding fight return to Canada
- Two Canadian men who were detained in the Dominican Republic for nearly three weeks after a post-wedding fight broke out at a resort have returned to Toronto, the latest step in a drama that the wife of one of the men said was "like a scene from the movies." more »
Must Watch
Latest World News Headlines
- Canada to send peacekeeping troops to Haiti
- A handful of Canadian troops are about to take part in peacekeeping operation in Haiti, under the command of Brazilian forces, in a long-delayed mission that has been kept inexplicably low on the political radar. more »
- World's displaced people at 18-year high of 45.2 million
- The Syrian civil war contributed to push the numbers of refugees and those displaced by conflict within their own nation to an 18-year high of 45.2 million worldwide by the end of 2012, the UN refugee agency says. more »
- Google asks secret court to lift gag on surveillance
- Google is asking the secretive Foreign Intelligence Surveillance Court to lift its long-standing gag order on how often the company is asked to turn over data about its customers to the U.S. government. more »
- Brazil protesters keep up pressure on government
- Thousands of demonstrators flooded into a square in Brazil's economic hub, Sao Paulo, on Tuesday for the latest in a historic wave of protests against the shoddy state of public transit, schools and other public services in this booming South American giant. more »
The National
The Current
- What happened to Betty Anne Gagnon? Jun. 18, 2013 3:09 PM Betty Anne Gagnon's mental disabilities didn't stop her from finding work, or finding friends. But when she needed it the most, she was unable to find help.
- 2 men jailed in Dominican wedding fight return to Canada
- MPs pass NDP motion on expenses, adjourn for summer
- Police probe death of woman, 27, in Kelowna home
- Hundreds attend 'Change Brazil' protest in Vancouver
- Are e-cigarettes safe to puff?
- Huge ancient city at Angkor Wat revealed by lasers
- Most groups don't want return of Trudeau speaking fees
- Parents of son 'brutally beaten' playing hockey want charges
- Tim Hortons being circled by Wall Street hedge funds

