Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cyberwarfare

China Says Washington Hack Claims ‘Fabricated’, Condemns US Allies

China on Tuesday said the US had “fabricated” allegations it carried out a massive Microsoft hack, countering that Washington was the “world champion” of cyber attacks while raging at American allies for signing up to a rare joint statement of condemnation.

China on Tuesday said the US had “fabricated” allegations it carried out a massive Microsoft hack, countering that Washington was the “world champion” of cyber attacks while raging at American allies for signing up to a rare joint statement of condemnation.

The United States on Monday accused Beijing of carrying out the March cyber attack on Microsoft Exchange, a top email server for corporations around the world, and charged four Chinese nationals over the “malicious” hack.

US Secretary of State Antony Blinken said the attack was part of a “pattern of irresponsible, disruptive and destabilizing behavior in cyberspace”.

China’s Ministry of State Security, or MSS, “has fostered an ecosystem of criminal contract hackers who carry out both state-sponsored activities and cybercrime for their own financial gain”, Blinken said in a statement.

In a simultaneous announcement, the US Department of Justice said four Chinese nationals had been charged with hacking the computers of dozens of companies, universities and government bodies in the United States and abroad between 2011 and 2018.

President Joe Biden told reporters the United States was still completing an investigation before taking any countermeasures, and drew parallels with the murky but prolific cybercrime attributed by Western officials to Russia.

“The Chinese government, not unlike the Russian government, is not doing this themselves, but are protecting those who are doing it, and maybe even accommodating them being able to do it,” Biden told reporters.

In an effort to put the diplomatic squeeze on Beijing, the United States coordinated its statement Monday with allies — the European Union, Britain, Australia, Canada, New Zealand, Japan and NATO.

China hit back, calling the allegations of a Beijing-supported cyber-attack campaign “fabricated”.

“The US has mustered its allies to carry out unreasonable criticisms against China on the issue of cybersecurity,” foreign ministry spokesman Zhao Lijian told reporters in Beijing.

“This move is fabricated out of nothing.”

Earlier, China’s diplomatic missions around the world rattled out rebuttals, as Beijing made its own coordinated defence.

The Chinese embassy in New Zealand called the allegations “totally groundless and irresponsible” while the embassy in Australia accused Canberra of “parroting the rhetoric of the US”.

“It is well known that the US has engaged in unscrupulous, massive and indiscriminate eavesdropping on many countries including its allies,” the embassy said in a statement.

“It is the world champion of malicious cyber attacks.”

– NATO solidarity –

Biden, like his predecessor Donald Trump, has ramped up pressure on China, seeing the rising Asian power’s increasingly assertive moves at home and abroad as the main long-term threat to the United States.

Allies backed up the castigation of China, with British Foreign Secretary Dominic Raab describing the cyberattack as “reckless”.

NATO offered “solidarity” over the Microsoft hacking without directly assigning blame.

State Department spokesman Ned Price said it was the first time that NATO — the Western military alliance whose members include Hungary and Turkey, which have comparatively cordial relations with Beijing — has condemned cyber activity from China.

“We know we’ll be stronger, we know we’ll be more effective when we act collectively,” Price said, saying the United States was not ruling out further action.

Biden has promised a strategy driven by alliances to face Beijing, drawing a contrast with Trump’s predilection for harsh rhetoric.

– Billions seen lost –

The Microsoft hack, which exploited flaws in the Microsoft Exchange service, affected at least 30,000 US organisations including local governments as well as organizations worldwide.

“Responsible states do not indiscriminately compromise global network security nor knowingly harbor cyber criminals — let alone sponsor or collaborate with them,” Blinken said in his statement.

“These contract hackers cost governments and businesses billions of dollars in stolen intellectual property, ransom payments, and cybersecurity mitigation efforts, all while the MSS had them on its payroll.”

Accusations of cyberattacks against the United States have recently focused on Russia, rather than China.

US officials say that many of the attacks originate in Russia, although they have debated to what extent there is state involvement. Russia denies responsibility.

Related: ‘Five Eyes’ Nations Blame China for APT10 Attacks

Related: More Countries Officially Blame Russia for SolarWinds Attack

Related: UK, US, Canada Accuse Russia of Hacking Virus Vaccine Trials

Written By

AFP 2023

Click to comment

Expert Insights

Related Content

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Cyberwarfare

Iranian APT Moses Staff is leaking data stolen from Saudi Arabia government ministries under the recently created Abraham's Ax persona

Cybercrime

Artificial intelligence is competing in another endeavor once limited to humans — creating propaganda and disinformation.

Cyberwarfare

The UK’s NCSC has issued a security advisory to warn about spearphishing campaigns conducted by two unrelated Russian and Iranian hacker groups.

Cyberwarfare

WASHINGTON - Cyberattacks are the most serious threat facing the United States, even more so than terrorism, according to American defense experts. Almost half...

Cybercrime

Albanian prosecutors on Wednesday asked for the house arrest of five public employees they blame for not protecting the country from a cyberattack by...

Cyberwarfare

Russia-linked cyberespionage group APT29 has been observed using embassy-themed lures and the GraphicalNeutrino malware in recent attacks.

Cyberwarfare

Cybersecurity firm Group-IB is raising the alarm on a newly identified advanced persistent threat (APT) actor targeting government and military organizations in Asia and...